U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Application Services STIG Checklist Version 1 Release 1.1 Checklist Details (Checklist Revisions)

Supporting Resources:

Target:

Target CPE Name
Apache Tomcat cpe:/a:apache:tomcat (View CVEs)
BEA WebLogic Server 7.0 sp6 cpe:/a:bea:weblogic_server:7.0:sp6 (View CVEs)
Sun JRE 5.0 Update 4 cpe:/a:sun:jre:5.0:update_4 (View CVEs)
Sun JVM JDK 5.0 Update 4 cpe:/a:sun:jdk:5.0:update_4 (View CVEs)

Checklist Highlights

Checklist Name:
Application Services STIG Checklist
Checklist ID:
365
Version:
Version 1 Release 1.1
Type:
Compliance
Review Status:
Archived
Authority:
Governmental Authority: Defense Information Systems Agency
Original Publication Date:
07/31/2006

Checklist Summary:

This Application Services Checklist provides the procedures for conducting a Security Readiness Review (SRR).

Checklist Role:

  • Web Server

Known Issues:

Not provided.

Target Audience:

Not provided.

Target Operational Environment:

  • Managed
  • Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

DOD Directive 8500.1

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

Not provided.

Product Support:

Not provided.

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

Version 1, Release 1.1 - 21 September 2006
Version 1, Release 1 - 17 January 2006
Updated "Point of Contact" - 08 January 2015
Updated URL to reflect change to the DISA website - http --> https
moved to archive status - 4/15/19

Dependency/Requirements:

URL Description

References:

Reference URL Description

NIST checklist record last modified on 04/15/2019