The ISEC7 Sphere server must be maintained at a supported version.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-225096	ISEC-00-000100	SV-225096r1013891_rule		High

Description

Versions of ISEC7 Sphere server are maintained by ISEC7 for specific periods of time. Unsupported versions will not receive security updates for new vulnerabilities which leaves them subject to exploitation. A list of supported ISEC7 Sphere server versions is maintained by ISEC7 here: https://www.isec7-us.com/emm-suite-mobile-monitoring.

STIG	Date
ISEC7 Sphere Security Technical Implementation Guide	2024-08-20

Details

Check Text (C-26788r1013889_chk)

Review the ISEC7 Sphere server version after logging into the console. Correlate the version with the latest supported version of ISEC7 Sphere server.

If the installed version of ISEC7 Sphere server is not a supported version, this is a finding.

Fix Text (F-26776r1013890_fix)

The administrator must check https://www.isec7-us.com/emm-suite-mobile-monitoring for the latest supported and unsupported versions of software.

Once confirmed, the administrator must update ISEC7 Sphere server to the latest supported version.