documentation_complete: true

title: 'Ensure Only Administrators Can Modify Configuration Files'

description: |-
    Server should be protected with permission sets which allow
    only an application administrator to modify application resource
    configuration files.

rationale: |-
    An access control flaw exists if users or processes can view or modify
    data to which they should not be permitted. This could result in situations
    ranging from information disclosure to system compromise and could potentially
    result in the compromise of other systems on the network.

severity: medium

identifiers:
    cce: ""

references:
    cis: ""
    disa: ""
    nist: ""

ocil_clause: 'non-administrators can modify files'
