Navigate

Check: SRG-APP-000148-CTR-000335

Container Platform SRG: SRG-APP-000148-CTR-000335 (in versions v1 r5 through v1 r1)

Title

The container platform must uniquely identify and authenticate users. (Cat II impact)

Discussion

The container platform requires user accounts to perform container platform tasks. These tasks may pertain to the overall container platform or may be component-specific, thus requiring users to authenticate against those specific components. To ensure accountability and prevent unauthenticated access, users must be identified and authenticated to prevent potential misuse and compromise of the system.

Check Content

Review the container platform configuration to determine if users are uniquely identified and authenticated. If users are not uniquely identified or are not authenticated, this is a finding.

Fix Text

Configure the container platform to uniquely identify and authenticate users.

Additional Identifiers

Rule ID: SV-233075r879589_rule

Vulnerability ID: V-233075

Group Title: SRG-APP-000148

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000764	The information system uniquely identifies and authenticates organizational users (or processes acting on behalf of organizational users).

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
IA-2	Identification And Authentication (Organizational Users)