The UEM server must remove old software components after updated versions have been installed.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-234603
SRG-APP-000454-UEM-000328
SV-234603r961677_rule
Medium
Description
Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries. Some information technology products may remove older versions of software automatically from the information system.
If the update is due to a security issue with the old version of the app, the old version is not reinstalled. If rollback files are used by the server, they must be stored so as to not be easily accessible to the production system, or cannot be accidentally installed on the operational system, and then must be deleted after a short period of time defined by the organization.