Navigate

Check: SRG-APP-000148-CTR-000340

Container Platform SRG: SRG-APP-000148-CTR-000340 (in versions v2 r2 through v1 r0.1)

Title

The container platform application program interface (API) must uniquely identify and authenticate users. (Cat II impact)

Discussion

The container platform requires user accounts to perform container platform tasks. These tasks are often performed through the container platform API. Protecting the API from users who are not authorized or authenticated is essential to keep the container platform stable. Protection of platform and application data and enhances the protections put in place for Denial-of Service (DoS) attacks.

Check Content

Review the container platform configuration to determine if users are uniquely identified and authenticated before the API is executed. If users are not uniquely identified or are not authenticated, this is a finding.

Fix Text

Configure the container platform to uniquely identify and authenticate users before container platform API access.

Additional Identifiers

Rule ID: SV-233076r1051115_rule

Vulnerability ID: V-233076

Group Title: SRG-APP-000148

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000764	Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
IA-2	Identification and Authentication (organizational Users)