Check: SRG-APP-000158-CTR-000390
Container Platform SRG:
SRG-APP-000158-CTR-000390
(in versions v1 r5 through v1 r1)
Title
The container platform must uniquely identify all network-connected nodes before establishing any connection. (Cat II impact)
Discussion
A container platform usually consists of multiple nodes. It is important for these nodes to be uniquely identified before a connection is allowed. Without identifying the nodes, unidentified or unknown nodes may be introduced, thereby facilitating malicious activity.
Check Content
Review the container platform configuration to determine if the container platform uniquely identifies all nodes before establishing a connection. If the container platform is not configured to uniquely identify all nodes before establishing the connection, this is a finding.
Fix Text
Configure the container platform to uniquely identify all nodes before establishing the connection.
Additional Identifiers
Rule ID: SV-233086r879599_rule
Vulnerability ID: V-233086
Group Title: SRG-APP-000158
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000778 |
The information system uniquely identifies an organization-defined list of specific and/or types of devices before establishing a local, remote, or network connection. |
Controls
| Number | Title |
|---|---|
| IA-3 |
Device Identification And Authentication |