[PATCH 2/4] Added severity medium, same as the RHEL 5 STIG.