Details

By default not all tasks are shown in the web client to administrators and only that user’s tasks will be shown. Enabling all tasks to be shown will allow the administrator to potentially see any malicious activity they may miss with the view disabled.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Edit the ‘webclient.properties’ file to set the ‘show.allusers.tasks’ value to ‘true’.

The default location for the ‘webclient.properties’ file are:

Appliance:
/etc/vmware/vsphere-client/

Windows:
C:ProgramDataVMwarevCenterServercfgvsphere-client

After editing the file the vSphere Web Client service will need to be restarted.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-5_Y21M10_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system VMware.

References

• 800-53|CM-6b.
• CAT|II
• CCI|CCI-000366
• Rule-ID|SV-216851r612237_rule
• STIG-ID|VCWN-65-000029
• STIG-Legacy|SV-104597
• STIG-Legacy|V-94767
• Vuln-ID|V-216851

Source

• Tenable.com/audits