Detections
Analytics

CIS MongoDB 4 v1.0.0 L1 Unix

Audit Details

Name: CIS MongoDB 4 v1.0.0 L1 Unix

Updated: 8/7/2026

Authority: CIS

Plugin: Unix

Revision: 1.14

Estimated Item Count: 12

File Details

Filename: CIS_MongoDB_4_Benchmark_Level_1_OS_Linux_v1.0.0.audit

Size: 37.8 kB

MD5: 3ac22823513047d3c9d066637e4622de
SHA256: 90cc7301f07f3d88172a34c5a38cb5917879d5cd95f3ea320e75cbed73d76c47

Audit Changelog

 
Revision 1.14

Aug 7, 2026

Functional Update
  • 2.1 Ensure Authentication is configured
  • 2.2 Ensure that MongoDB does not bypass authentication via the localhost exception
  • 3.3 Ensure that MongoDB is run using a non-privileged, dedicated service account
  • 4.2 Ensure Weak Protocols are Disabled
  • 5.1 Ensure that system activity is audited
  • 6.1 Ensure that MongoDB uses a non-default port
  • 7.2 Ensure appropriate database file permissions are set.
Informational Update
  • 2.1 Ensure Authentication is configured
  • 2.2 Ensure that MongoDB does not bypass authentication via the localhost exception
  • 3.3 Ensure that MongoDB is run using a non-privileged, dedicated service account
  • 4.2 Ensure Weak Protocols are Disabled
  • 5.1 Ensure that system activity is audited
  • 6.1 Ensure that MongoDB uses a non-default port
  • 7.2 Ensure appropriate database file permissions are set.
Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • References updated.
  • See also link updated.
  • Variables updated.
Added
  • 1.1 Ensure the appropriate MongoDB software version/patches are installed
  • 2.3 Ensure authentication is enabled in the sharded cluster
  • 4.3 Ensure Encryption of Data in Transit TLS or SSL (Transport Encryption)
  • 7.1 Ensure appropriate key file permissions are set
  • CIS_MongoDB_4_v1.0.0_L1_Unix.audit from CIS MongoDB 4 v1.0.0
Removed
  • 2.3 Ensure authentication is enabled in the sharded cluster - CAFile
  • 2.3 Ensure authentication is enabled in the sharded cluster - PEMKeyFile
  • 2.3 Ensure authentication is enabled in the sharded cluster - authenticationMechanisms
  • 2.3 Ensure authentication is enabled in the sharded cluster - clusterAuthMode
  • 2.3 Ensure authentication is enabled in the sharded cluster - clusterFile
  • 4.3 Ensure Encryption of Data in Transit TLS or SSL (Transport Encryption)
  • 7.1 Ensure appropriate key file permissions are set - CAFile
  • 7.1 Ensure appropriate key file permissions are set - PEMKeyFile
  • 7.1 Ensure appropriate key file permissions are set - keyFile
  • CIS_MongoDB_4_Benchmark_Level_1_OS_Linux_v1.0.0.audit from CIS MongoDB 4 Benchmark
Revision 1.13

Jun 17, 2024

Miscellaneous
  • Metadata updated.
Revision 1.12

Dec 8, 2023

Functional Update
  • 7.1 Ensure appropriate key file permissions are set - CAFile
  • 7.1 Ensure appropriate key file permissions are set - PEMKeyFile
  • 7.1 Ensure appropriate key file permissions are set - keyFile
Revision 1.11

Dec 6, 2023

Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • Variables updated.
Revision 1.10

Nov 17, 2023

Functional Update
  • 5.1 Ensure that system activity is audited
Miscellaneous
  • Metadata updated.
Revision 1.9

Apr 12, 2023

Miscellaneous
  • Metadata updated.
  • Platform check updated.
Revision 1.8

Mar 7, 2023

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.7

Jan 4, 2023

Miscellaneous
  • Metadata updated.
  • Variables updated.
Revision 1.6

Dec 7, 2022

Miscellaneous
  • Metadata updated.
Revision 1.5

Nov 4, 2022

Functional Update
  • 6.1 Ensure that MongoDB uses a non-default port
  • 7.2 Ensure appropriate database file permissions are set.