+APP.4.2.A2 Secure Configuration of the SAP Java Stack (B)

APP.4.2.A2 Secure Configuration of the SAP Java Stack (B)

The SAP Java stack MUST be configured securely if it is used. Security mechanisms and concepts that are different from the SAP ABAP stack MUST be created for this. Administrators MUST therefore know the architecture of the Java stack and how it is administered. In addition, unnecessary services MUST be shut down, standard content removed, HTTP services protected, and access to administration interfaces restricted.

1. Yleiskatsaus

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset

3. Liittyvät säädökset

Säädökset

Linkitetyt tehtävät

Linkit
blocks G 0.14 Interception of Information / Espionage
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.39 Malware
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information