Technical Security Policy Requirement CA Web Viewer MS SQL DB - Set the Ole Automation Procedures Server Configuration

Products

• Output Management Web Viewer

Issue/Introduction

Our Cybersecurity team has flagged the below Technical Security Policy Requirement (TSR) on the MS SQL database used by the CA Web Viewer application.

Is it ok to set  "Ole Automation Procedures Server Configuration Option to 0"? If not, please provide a solution/fix.

Policy Details:

Rule Description:

Status of the 'OLE Automation Procedures' setting

Instance/Interface:

MSSQL 2016:1:50000:MSSQLSERVER:CAOMWVP

Actual Value:

Enabled (1)

Expected Value:

The String value X indicates the status of the OLE Automation Procedures setting on the database. A value of 0 indicates the setting is disabled; a value of 1 indicates the setting is enabled. Expected: Disabled (0) ------------ OR ------------ regular expression match Disabled (0)

 

Environment

Release : 12.1

Component : CA OUTPUT MANAGEMENT WEB VIEWER FOR ALL PLATFORMS

MS SQL Database

Resolution

Web Viewer does not use OLE Automation.