STIGhubSTIGhub
STIGsSearchCompareAbout

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • Compare Versions

Resources

  • About
  • VPAT
  • DISA STIG Library
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to Apache Server 2.4 Windows Server Security Technical Implementation Guide

V-214359

CAT I (High)

The Apache web server software must be a vendor-supported version.

Rule ID

SV-214359r961863_rule

STIG

Apache Server 2.4 Windows Server Security Technical Implementation Guide

Version

V3R4

CCIs

CCI-000366

Discussion

Many vulnerabilities are associated with older versions of web server software. As hot fixes and patches are issued, these solutions are included in the next version of the server software. Maintaining the web server at a current version makes the efforts of a malicious user to exploit the web service more difficult.

Check Content

Determine the version of the Apache software that is running on the system.

In a command line, navigate to "<'INSTALLED PATH'>\bin". Run "httpd -v" to view the Apache version.

If the version of Apache is not at the following version or higher, this is a finding:

Apache 2.4 (February 2012)

Fix Text

Install the current version of the web server software and maintain appropriate service packs and patches.