CCE-95484-2| Platform: cpe:/o:amazon:linux:2, cpe:/o:centos:centos:7, cpe:/o:oracle:linux:7, cpe:/o:oracle:linux:8, cpe:/o:redhat:enterprise_linux:7, cpe:/o:redhat:enterprise_linux:8, cpe:/o:redhat:enterprise_linux:9 | Date: (C)2021-03-05 (M)2023-07-04 |
Description:
The cron daemon is used to execute batch jobs on the system.
Rationale:
While there may not be user jobs that need to be run on the system, the system does have maintenance jobs that may include security monitoring that have to run. If another method for scheduling tasks is not being used, cron is used to execute them, and needs to be enabled and running.
Remediation:
Run the following command to enable and start cron:
systemctl --now enable crond
Parameter:
[yes/no]
Technical Mechanism:
Run the following command to enable and start cron:
systemctl --now enable crond
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 7.3 | Attack Vector: NETWORK |
| Exploit Score: 3.9 | Attack Complexity: LOW |
| Impact Score: 3.4 | Privileges Required: NONE |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: LOW |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:72824 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:72721 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:72354 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:68635 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:84228 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:71988 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:72930 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:73035 |
