Check: WIR1305-01
BlackBerry Enterprise Server, Part 2:
WIR1305-01
(in versions v2 r10 through v2 r8)
Title
The BlackBerry MDS Integration Service must not be installed on a production BES. (Cat II impact)
Discussion
The BlackBerry Enterprise Service MDS Integration Service is a software development platform and should not be installed on a production BES. The service, if not properly configured, can allow unsecured connections between the BlackBerry and BES and between the BES and back-office run-time application servers.
Check Content
Detailed Policy Requirements: The MDS Integration Service must not be installed on a production BES. It should be installed only on a development or test BES when required for software development. Check Procedures: Check to see if the BlackBerry MDS Integration Service is installed on the production BES by looking at the left side of the BlackBerry Administration Server (BAS). Servers and components >> BlackBerry Solution topology >> BlackBerry Domain >> Component view. See if the “MDS Integration Service” is installed.
Fix Text
The BlackBerry MDS Integration Service will not be installed on the BES.
Additional Identifiers
Rule ID: SV-7462r3_rule
Vulnerability ID: V-7078
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
No CCIs are assigned to this check |
Controls
Number | Title |
---|---|
No controls are assigned to this check |