zOS WebsphereMQ for ACF2 Security Technical Implementation Guide

Version: 6

Updated: 22 Apr 2024

Findings: 17

Findings

V-224354 - WebSphere MQ channel security must be implemented in accordance with security requirements. (high)
V-224355 - WebSphere MQ channel security is not implemented in accordance with security requirements. (medium)
V-224356 - Production WebSphere MQ Remotes must utilize Certified Name Filters (CNF). (medium)
V-224357 - User timeout parameter values for WebSphere MQ queue managers are not specified in accordance with security requirements. (medium)
V-224358 - WebSphere MQ started tasks are not defined in accordance with the proper security requirements. (medium)
V-224359 - WebSphere MQ all update and alter access to MQSeries/WebSphere MQ product and system data sets are not properly restricted. (medium)
V-224360 - WebSphere MQ resource classes are not properly activated. (medium)
V-224361 - Websphere MQ switch profiles must be properly defined to the MQADMIN class. (high)
V-224362 - WebSphere MQ MQCONN Class resources must be protected in accordance with security. (medium)
V-224363 - WebSphere MQ dead letter and alias dead letter queues are not properly defined. (medium)
V-224364 - WebSphere MQ queue resource defined to the MQQUEUE resource class are not protected in accordance with security requirements. (medium)
V-224365 - WebSphere MQ Process resources are not protected in accordance with security requirements. (medium)
V-224366 - WebSphere MQ Namelist resources are not protected in accordance with security requirements. (medium)
V-224367 - WebSphere MQ alternate user resources defined to MQADMIN resource class are not protected in accordance with security requirements. (medium)
V-224368 - WebSphere MQ context resources defined to the MQADMIN resource class are not protected in accordance with security requirements. (medium)
V-224369 - WebSphere MQ command resources defined to MQCMDS resource class are not protected in accordance with security requirements. (medium)
V-224370 - WebSphere MQ RESLEVEL resources in the MQADMIN resource class are not protected in accordance with security requirements. (medium)