TMAegis

Penjelajah aturan

Jelajahi setiap aturan hardening di katalog. Filter menurut platform, tingkat keparahan, level profil, dan apakah pemeriksaan dapat diotomatisasi.

113 aturan ditemukandari 11.219Halaman 1 dari 5

IDJudulTingkat keparahan
TMA-WEBSPHERE-1.1Ensure root does not have ownership of Websphere Liberty binarieswebsphere · Level 1Tinggi
TMA-WEBSPHERE-2.1Ensure 'displayAuthenticationRealm' is set to 'false'websphere · Level 1Tinggi
TMA-WEBSPHERE-2.3Ensure that the LDAP connection uses TLSwebsphere · Level 1Tinggi
TMA-WEBSPHERE-3.2Ensure JDK Security Manager is Enabledwebsphere · Level 2Tinggi
TMA-WEBSPHERE-4.1.2.2Ensure 'ssoDomainNames' attribute is configured for the authentication cookies.websphere · Level 1Tinggi
TMA-WEBSPHERE-4.1.2.4Ensure 'ssoRequiresSSL' secure attribute is set to 'true' for the LTPA Cookieswebsphere · Level 1Tinggi
TMA-WEBSPHERE-4.1.2.6Ensure 'httpOnlyCookies' HttpOnly attribute is set to 'True' for the authentication cookieswebsphere · Level 1Tinggi
TMA-WEBSPHERE-4.2.2Ensure 'sslProtocol' is set to the latest versions of TLS (Transport Layer Security)websphere · Level 1Tinggi
TMA-WEBSPHERE-4.2.4Ensure that outbound TLS configurations are specifiedwebsphere · Level 1Tinggi
TMA-WEBSPHERE-4.2.7Ensure Hostname verification for TLS communication is enabledwebsphere · Level 1Tinggi
TMA-WEBSPHERE-4.2.10Ensure mutual TLS authentication is enabledwebsphere · Level 2Tinggi
TMA-WEBSPHERE-4.2.11Ensure that strong algorithms are used for TLS certificates.websphere · Level 1Tinggi
TMA-WEBSPHERE-4.2.13Ensure that hardware crypto cards/modules (HSM) are used to store SSL/TLS certificateswebsphere · Level 2Tinggi
TMA-WEBSPHERE-4.2.14Ensure SP800-131a recommendation is used for stronger cryptographic keys and more robust algorithms.websphere · Level 2Tinggi
TMA-WEBSPHERE-4.2.15Ensure that the Federal Information Processing Standards (FIPS) are used for the cryptographic moduleswebsphere · Level 2Tinggi
TMA-WEBSPHERE-4.3.1Ensure 'signatureAlgorithm' asymmetric key algorithm is set for encrypting the JSON Web Tokenswebsphere · Level 1Tinggi
TMA-WEBSPHERE-4.3.6Ensure 'signatureAlgorithm' is set to a secure algorithm in OIDC Relying Party (RP)websphere · Level 1Tinggi
TMA-WEBSPHERE-4.3.7Ensure 'signatureAlgorithm' is set to a secure algorithm in OIDC Provider (OP)websphere · Level 1Tinggi
TMA-WEBSPHERE-4.3.8Ensure 'httpsRequired' is set to 'true' in OIDC Relying Party (RP)websphere · Level 1Tinggi
TMA-WEBSPHERE-4.3.9Ensure 'tokenEndpointAuthMethodsSupported' is set to a valid authentication method in OIDC Provider (OP)websphere · Level 1Tinggi
TMA-WEBSPHERE-4.3.12Ensure 'clientSecretEncoding' is set to a strong encoding type in OAuth 2.0websphere · Level 1Tinggi
TMA-WEBSPHERE-4.3.13Ensure 'httpsRequired' is set to 'true' in OAuth 2.0websphere · Level 1Tinggi
TMA-WEBSPHERE-4.3.15Ensure 'httpsRequired' is set to 'true' in SAMLwebsphere · Level 1Tinggi
TMA-WEBSPHERE-4.4.5Ensure 'logoutOnHttpSessionExpire' is set to 'true'websphere · Level 1Tinggi
TMA-WEBSPHERE-4.4.14Ensure 'invalidateOnUnauthorizedSessionRequestException' is set to 'false'websphere · Level 1Tinggi