U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Oracle JRE 8 Windows STIG Version 2, Release 1 Checklist Details (Checklist Revisions)

Supporting Resources:

Target:

Target CPE Name
Oracle JRE 8 for Windows cpe:/a:oracle:jre:8.0 (View CVEs)

Checklist Highlights

Checklist Name:
Oracle JRE 8 Windows STIG
Checklist ID:
708
Version:
Version 2, Release 1
Type:
Compliance
Review Status:
Archived
Authority:
Governmental Authority: Defense Information Systems Agency
Original Publication Date:
04/28/2017

Checklist Summary:

he Java Runtime Environment (JRE) Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DoD) information systems. This document is meant for securing Java Runtime configuration settings for systems that run java applications and applets. Certain default settings within the JRE pose a security risk so it is necessary to deploy system wide properties to ensure a higher degree of security when utilizing the JRE. The JRE STIG is meant to be used in conjunction with the appropriate operating system (OS) STIGs.

Checklist Role:

  • Desktop Client
  • Desktop or Mobile Client
  • Business Productivity Application

Known Issues:

Not provided.

Target Audience:

These requirements are designed to assist Security Managers (SMs), Information Assurance Managers (IAMs), Information Assurance Officers (IAOs), and System Administrators (SAs) with configuring and maintaining security controls.

Target Operational Environment:

  • Managed
  • Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

DoDD 8500.1

Comments/Warnings/Miscellaneous:

Comments or proposed revisions to this document should be sent via e-mail to the following address: disa.stig_spt@mail.mil. DISA Field Security Operations (FSO) will coordinate all change requests with the relevant DoD organizations before inclusion in this document.

Disclaimer:

Not provided.

Product Support:

omments or proposed revisions to this document should be sent via e-mail to the following address: disa.stig_spt@mail.mil. DISA Field Security Operations (FSO) will coordinate all change requests with the relevant DoD organizations before inclusion in this document.

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

updated to FINAL - 12/07/2016
Updated to Version 1, release 3 - 01/27/2017
Updated to FINAL - 03/08/2017
Updated to Version 1, release 3 - 04/28/2017
Updated to FINAL - 05/30/2017
Updated URL to reflect change to the DISA website - http --> https
updated to v1,r5 - 02/16/2018
Updated to FINAL - 3/18/2018
Updated URLs - 6/13/19
sunset per DISA - 12/2/2020
Updated URLs - 1/27/2021

Dependency/Requirements:

URL Description

References:

Reference URL Description

NIST checklist record last modified on 01/27/2021