Detections
Analytics
CIS MongoDB 3.2 Database Audit L2 v1.0.0
Audit Details
Name: CIS MongoDB 3.2 Database Audit L2 v1.0.0
Updated: 6/17/2024
Authority: CIS
Plugin: MongoDB
Revision: 1.11
Estimated Item Count: 10
File Details
Filename: CIS_MongoDB_3.2_Benchmark_Level_2_DB_v1.0.0.audit
Size: 19.3 kB
MD5: 1d0553e793069e1dd5dfe89f83115cdf
SHA256: 8cb7964cad66e87819017bacc467d5f75f8556b8fdfd6ae6c216ec1d36271f9c
Audit Items
| Description | Categories |
|---|---|
| 3.4 Ensure that each role for each MongoDB database is needed and grants only the necessary privileges | ACCESS CONTROL |
| 3.5 Review User-Defined Roles | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - clusterAdmin | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - dbAdminAnyDatabase | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - dbOwner | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - hostManager | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - readWriteAnyDatabase | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - userAdmin | ACCESS CONTROL |
| 3.6 Review Superuser/Admin Roles - userAdminAnyDatabase | ACCESS CONTROL |
| 6.5 Ensure The 'test' database is not installed | CONFIGURATION MANAGEMENT |