CCE-19800-2| Platform: ms-sql2005 | Date: (C)2013-02-19 (M)2022-10-10 |
Reporting Services Web service requests and HTTP should be configured appropriately
Parameter:
(1) enable/disable
Technical Mechanism:
From Surface Area Configuration for Features:
1. Connect to the Report Services instance
2. Expand the instance
3. Expand Report Services
4. Select Web Service Requests and HTTP Access
5. Click on or do not click on Enable Web Service Requests and HTTP access check box
6. Click OK
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : | Attack Vector: |
| Exploit Score: | Attack Complexity: |
| Impact Score: | Privileges Required: |
| Severity: | User Interaction: |
| Vector: | Scope: |
| | Confidentiality: |
| | Integrity: |
| | Availability: |
| | |
References: | Resource Id | Reference |
|---|
| DISA STIG SQL 2005 INS Version 8, Release 1.7 Benchmark Date: 27 August 2010 | Rule ID: V0015199 Rule Title: Reporting Services Web service requests and HTTP access should be disabled if not required. STIG ID: DM6120 Severity: CAT III Class: Unclass |
