Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The application must execute without excessive account permissions.
Description
Discussion Text
Applications are often designed to utilize a user account. The account represents a means to control application permissions and access to OS resources, application resources or both.
When the application is designed and installed, care must be taken not to assign excessive permissions to the user account that is used by the application.
An application operating with unnecessary privileges can potentially give an attacker access to the underlying operating system or if the privileges required for application execution are at a higher level than the privileges assigned to organizational users invoking such applications/programs, those users are indirectly provided with greater privileges than assigned by organizations.
Applications must be designed and configured to operate with only those permissions that are required for proper operation.
When the application is designed and installed, care must be taken not to assign excessive permissions to the user account that is used by the application.
An application operating with unnecessary privileges can potentially give an attacker access to the underlying operating system or if the privileges required for application execution are at a higher level than the privileges assigned to organizational users invoking such applications/programs, those users are indirectly provided with greater privileges than assigned by organizations.
Applications must be designed and configured to operate with only those permissions that are required for proper operation.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.