Details

The application server must provide a capability to halt or otherwise disable the automatic execution of deployed applications until such time that the application is considered part of the established application server baseline. Deployment to the application server should not provide a means for automatic application start-up should the application server itself encounter a restart condition.

Solution

1. Access AC
2. From ‘Domain Structure’, select the top-level domain
3. Select ‘Configuration’ tab -> ‘General’ tab
4. Check ‘Production Mode’ checkbox. Click ‘Save’
5. Restart all servers

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_WebLogic_Server_12c_V2R1_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6b.
• CAT|III
• CCI|CCI-000366
• Rule-ID|SV-235963r628667_rule
• STIG-ID|WBLC-03-000129
• STIG-Legacy|SV-70529
• STIG-Legacy|V-56275
• Vuln-ID|V-235963

Source

• Tenable.com/audits