Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Debugging and trace information, within Automation Controller NGINX web server, used to diagnose the web server must be disabled.
Description
Discussion Text
It is important that Automation Controller NGINX web server debugging and trace information used to diagnose the web server is disabled, because debugging information can yield information about the Automation Controller NGINX webserver, like web server type, version, patches installed, plugins, modules, the hosted app’s code type. Back ends used for storage could be revealed, as well. An attacker would not need to cause an error condition to gain this information because they could reside in logs and general messages.
If debugging/trace information is enabled, attackers could get the information from logs and general information, without drawing attention to themselves via an error message.
If debugging/trace information is enabled, attackers could get the information from logs and general information, without drawing attention to themselves via an error message.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.