Vulnerability Discussion

Without sufficient granularity of time stamps, it is not possible to adequately determine the chronological order of records.

Time stamps generated by the web server include date and time and must be to a granularity of one second.

Check

Review the web server documentation and configuration to determine if log records are time stamped to a minimum granularity of one second.

Have a user generate a logable event and review the log data to determine if the web server is configured correctly.

If the log data does not contain a time stamp to a minimum granularity of one second, this is a finding.

Fix

Configure the web server to record log events with a time stamp to a granularity of one second.