Nutanix AOS 5.20.x Application STIG Version Comparison

There are 1 differences between versions v1 r1 (Sept. 8, 2022) (the "left" version) and v1 r2 (July 24, 2024) (the "right" version).

Check NUTX-AP-001080 was changed between these two versions. Green, underlined text was added, red, struck-out text was removed.

The regular view of the left check and right check may be easier to read.

Title

Nutanix AOS must be running an operating system release that is currently supported by the vendor.

Check Content

1. Log in to Product version is end of life and no longer supported. If the system is running Prism Element web interface. 2. Click on the person's name that just logged in. 3. In the drop down menu, click "About Nutanix". 4. Compare the Nutanix AOS version 5.20.x, against the supported versions in the Nutanix support portal. https://www.nutanix.com/support-services/product-support If the AOS version is not supported as indicated in the Nutanix support portal, this is a finding.

Discussion

Security flaws with software applications are discovered daily. Vendors are constantly updating and patching their products to address newly discovered security vulnerabilities. Organizations (including any contractor to the organization) are required to promptly install security-relevant software updates (e.g., patches, service packs, and hot fixes) to production systems after thorough testing of the patches within a lab environment. Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed expeditiously.

Fix

Use Nutanix LCM and upgrade Upgrade to a supported version.