Oracle HTTP Server 12.1.3 Security Technical Implementation Guide

The Oracle HTTP Server 12.1.3 Security Technical Implementation Guide (V2 R3) has 280 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

280STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Thu Jan 30 2025

The SecureListener property of the Node Manager configured to support OHS must be enabled for secure communication.

Oracle HTTP Server 12.1.3 Security Technical Implementation Guide

Assessment Title

Rule Text

The SecureListener property of the Node Manager configured to support OHS must be enabled for secure communication.

Description

Discussion Text

Oracle Node Manager is the utility that is used to perform common operational tasks for OHS.

To protect the information being sent between WebLogic Scripting Tool and Node Manager, the Node Manager listening address must be secured.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-221418

Rule

SV-221418r961863_rule

Severity

medium

Rule Version

OH12-1X-000179

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

1. Open $DOMAIN_HOME/nodemanager/nodemanager.properties with an editor.

2. Search for the "SecureListener" property.

3. If the property is not set to "True", this is a finding.

Implementation Procedure

Fix Text

1. Open $DOMAIN_HOME/nodemanager/nodemanager.properties with an editor.

2. Search for the "SecureListener" property.

3. Set the "SecureListener" property to "True".

STIG check 146 of 280 in the Oracle HTTP Server 12.1.3 STIG checklist

← Previous · V-221417OHS must have Entity tags (ETags) disabled.Next · V-221419 →The ListenAddress property of the Node Manager configured to support OHS must match the CN of the certificate used by Node Manager.