Title

The Java Runtime Environment (JRE) must not be installed on an unsupported operating system. (Cat I impact)

Discussion

Security updates are the standard method for addressing discovered vulnerabilities. The operating system platform the JRE is installed on must be supported for security updates or the OS becomes a threat vector that can negatively impact the JRE. Organizations must run the JRE on a supported OS version to ensure security updates are available and to mitigate threats to the JRE.

Check Content

Check the OS version to ensure it is supported by the vendor. Microsoft support for Windows XP ended April 8 2014. If the JRE is installed on an XP system, this is a finding.

Fix Text

Upgrade the operating system platform the JRE is installed on to a supported OS version.

Additional Identifiers

Rule ID: SV-68629r1_rule

Vulnerability ID: V-54383

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.