← Back to Central Log Server Security Requirements Guide

V-278989

CAT I (High)

The Central Log Server must be a version supported by the vendor.

Rule ID

SV-278989r1137794_rule

STIG

Central Log Server Security Requirements Guide

Version

V3R4

CCIs

CCI-003376

Discussion

Unsupported software and systems should not be used because fixes to newly identified bugs will not be implemented by the vendor. The lack of support can result in potential vulnerabilities. Software and systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities, which leaves them subject to exploitation. When maintenance updates and patches are no longer available, software is no longer considered supported and should be upgraded or decommissioned.

Check Content

Verify that the Central Log Server is a version supported by the vendor.

If the Central Log Server is not a version supported by the vendor, this is a finding.

Fix Text

Upgrade or install a Central Log Server which is a version supported by the vendor.