Detections
Analytics
CIS MongoDB 3.2 Database Audit L2 v1.0.0
Audit Details
Name: CIS MongoDB 3.2 Database Audit L2 v1.0.0
Updated: 3/7/2023
Authority: CIS
Plugin: MongoDB
Revision: 1.10
Estimated Item Count: 10
File Details
Filename: CIS_MongoDB_3.2_Benchmark_Level_2_DB_v1.0.0.audit
Size: 19.3 kB
MD5: cc397e487d032c6532d8a43c4c1479df
SHA256: b50fe8901c5018535f53df4bae314ddd7087a491380bfe087325e675edde541a
Audit Items
| Description | Categories |
|---|---|
| 3.4 Ensure that each role for each MongoDB database is needed and grants only the necessary privileges | ACCESS CONTROL |
| 3.5 Review User-Defined Roles | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - clusterAdmin | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - dbAdminAnyDatabase | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - dbOwner | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - hostManager | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - readWriteAnyDatabase | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - userAdmin | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - userAdminAnyDatabase | ACCESS CONTROL |
| 6.5 Ensure The 'test' database is not installed | CONFIGURATION MANAGEMENT |