Aug 7, 2026 Functional Update- 2.1 Ensure Authentication is configured
- 2.2 Ensure that MongoDB does not bypass authentication via the localhost exception
- 4.2 Ensure Weak Protocols are Disabled
- 5.1 Ensure that system activity is audited
- 6.1 Ensure that MongoDB uses a non-default port
- 7.2 Ensure appropriate database file permissions are set.
Informational Update- 2.1 Ensure Authentication is configured
- 2.2 Ensure that MongoDB does not bypass authentication via the localhost exception
- 3.3 Ensure that MongoDB is run using a non-privileged, dedicated service account
- 4.2 Ensure Weak Protocols are Disabled
- 5.1 Ensure that system activity is audited
- 6.1 Ensure that MongoDB uses a non-default port
- 7.1 Ensure appropriate key file permissions are set
- 7.2 Ensure appropriate database file permissions are set.
Miscellaneous- Metadata updated.
- Platform check updated.
- References updated.
- See also link updated.
- Variables updated.
Added- 1.1 Ensure the appropriate MongoDB software version/patches are installed
- 2.3 Ensure authentication is enabled in the sharded cluster
- 4.3 Ensure Encryption of Data in Transit TLS or SSL (Transport Encryption)
- CIS_MongoDB_4_v1.0.0_L1_Windows.audit from CIS MongoDB 4 v1.0.0
Removed- 2.3 Ensure authentication is enabled in the sharded cluster - CAFile
- 2.3 Ensure authentication is enabled in the sharded cluster - PEMKeyFile
- 2.3 Ensure authentication is enabled in the sharded cluster - authenticationMechanisms
- 2.3 Ensure authentication is enabled in the sharded cluster - clusterAuthMode
- 2.3 Ensure authentication is enabled in the sharded cluster - clusterFile
- 4.3 Ensure Encryption of Data in Transit TLS or SSL (Transport Encryption)
- CIS_MongoDB_4_Benchmark_Level_1_OS_Windows_v1.0.0.audit from CIS MongoDB 4 Benchmark
|
Jun 17, 2024 |
Oct 6, 2023 Miscellaneous- Metadata updated.
- Platform check updated.
|
Apr 12, 2023 |
Mar 7, 2023 Miscellaneous- Metadata updated.
- References updated.
|
Jan 4, 2023 Miscellaneous- Metadata updated.
- Variables updated.
|
Dec 7, 2022 |
Apr 25, 2022 |
Mar 29, 2022 Miscellaneous- Metadata updated.
- References updated.
|