CD12-00-000400 - The audit information produced by PostgreSQL must be protected from unauthorized modification.

800-53|AU-9

CAT|II

CCI|CCI-000163

Rule-ID|SV-233514r960933_rule

STIG-ID|CD12-00-000400

Vuln-ID|V-233514

CD12-00-000500 - PostgreSQL must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

800-53|AC-2(1)

CAT|I

CCI|CCI-000015

Rule-ID|SV-233515r1043176_rule

STIG-ID|CD12-00-000500

Vuln-ID|V-233515

CD12-00-000700 - Privileges to change PostgreSQL software modules must be limited.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-233517r960960_rule

STIG-ID|CD12-00-000700

Vuln-ID|V-233517

CD12-00-000710 - PostgreSQL must limit privileges to change functions and triggers, and links to software external to PostgreSQL.

Rule-ID|SV-233518r960960_rule

STIG-ID|CD12-00-000710

Vuln-ID|V-233518

CD12-00-000800 - If passwords are used for authentication, PostgreSQL must transmit only encrypted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-233519r961029_rule

STIG-ID|CD12-00-000800

Vuln-ID|V-233519

CD12-00-000900 - PostgreSQL must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

800-53|AC-3

CCI|CCI-000213

Rule-ID|SV-233520r1137654_rule

STIG-ID|CD12-00-000900

Vuln-ID|V-233520

CD12-00-001100 - PostgreSQL must associate organization-defined types of security labels having organization-defined security label values with information in transmission.

800-53|AC-16a.

CCI|CCI-002264

Rule-ID|SV-233521r1138542_rule

STIG-ID|CD12-00-001100

Vuln-ID|V-233521

CD12-00-001300 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (functions, trigger procedures, links to software external to PostgreSQL, etc.) must be restricted to authorized users.

Rule-ID|SV-233523r960960_rule

STIG-ID|CD12-00-001300

Vuln-ID|V-233523

CD12-00-001400 - PostgreSQL must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

800-53|IA-8

CCI|CCI-000804

Rule-ID|SV-233524r961053_rule

STIG-ID|CD12-00-001400

Vuln-ID|V-233524

CD12-00-001700 - PostgreSQL must associate organization-defined types of security labels having organization-defined security label values with information in storage.

CCI|CCI-002262

Rule-ID|SV-233525r1138540_rule

STIG-ID|CD12-00-001700

Vuln-ID|V-233525

CD12-00-002100 - PostgreSQL must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

800-53|AU-4

CCI|CCI-001849

Rule-ID|SV-233529r961392_rule

STIG-ID|CD12-00-002100

Vuln-ID|V-233529

CD12-00-002200 - PostgreSQL must enforce discretionary access control policies, as defined by the data owner, over defined subjects and objects.

800-53|AC-3(4)

CCI|CCI-002165

Rule-ID|SV-233530r961317_rule

STIG-ID|CD12-00-002200

Vuln-ID|V-233530

CD12-00-002300 - The audit information produced by PostgreSQL must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-233531r960936_rule

STIG-ID|CD12-00-002300

Vuln-ID|V-233531

CD12-00-002500 - PostgreSQL must reveal detailed error messages only to the ISSO, ISSM, SA, and DBA.

800-53|SI-11b.

CCI|CCI-001314

Rule-ID|SV-233533r961170_rule

STIG-ID|CD12-00-002500

Vuln-ID|V-233533

CD12-00-002600 - PostgreSQL must allow only the Information System Security Manager (ISSM), or individuals or roles appointed by the ISSM, to select which auditable events are to be audited.

800-53|AU-12b.

CCI|CCI-000171

Rule-ID|SV-233534r960882_rule

STIG-ID|CD12-00-002600

Vuln-ID|V-233534

CD12-00-003100 - Database objects (including but not limited to tables, indexes, storage, trigger procedures, functions, links to software external to PostgreSQL, etc.) must be owned by database/DBMS principals authorized for ownership.

Rule-ID|SV-233539r960960_rule

STIG-ID|CD12-00-003100

Vuln-ID|V-233539

CD12-00-004000 - PostgreSQL must isolate security functions from non-security functions.

800-53|SC-3

CCI|CCI-001084

Rule-ID|SV-233546r961131_rule

STIG-ID|CD12-00-004000

Vuln-ID|V-233546

CD12-00-004150 - PostgreSQL must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.

800-53|CM-7(1)(b)

CCI|CCI-001762

Rule-ID|SV-233548r961470_rule

STIG-ID|CD12-00-004150

Vuln-ID|V-233548

CD12-00-004200 - The audit information produced by PostgreSQL must be protected from unauthorized read access.

CCI|CCI-000162

Rule-ID|SV-233549r960930_rule

STIG-ID|CD12-00-004200

Vuln-ID|V-233549

CD12-00-004300 - When updates are applied to PostgreSQL software, any software components that have been replaced or made unnecessary must be removed.

800-53|SI-2(6)

CCI|CCI-002617

Rule-ID|SV-233550r961677_rule

STIG-ID|CD12-00-004300

Vuln-ID|V-233550

CD12-00-007000 - PostgreSQL, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-233577r961038_rule

STIG-ID|CD12-00-007000

Vuln-ID|V-233577

CD12-00-007200 - PostgreSQL must maintain the confidentiality and integrity of information during preparation for transmission.

800-53|SC-8(2)

CCI|CCI-002420

Rule-ID|SV-233579r961638_rule

STIG-ID|CD12-00-007200

Vuln-ID|V-233579

CD12-00-008000 - PostgreSQL must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to generate and validate cryptographic hashes.

800-53|SC-13

CCI|CCI-002450

Rule-ID|SV-233583r1137661_rule

STIG-ID|CD12-00-008000

Vuln-ID|V-233583

CD12-00-008200 - PostgreSQL must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the data owner's requirements.

Rule-ID|SV-233585r1137664_rule

STIG-ID|CD12-00-008200

Vuln-ID|V-233585

CD12-00-008400 - PostgreSQL must prohibit user installation of logic modules (functions, trigger procedures, views, etc.) without explicit privileged status.

800-53|CM-11(2)

CCI|CCI-001812

CCI|CCI-003980

Rule-ID|SV-233587r1015713_rule

STIG-ID|CD12-00-008400

Vuln-ID|V-233587

CD12-00-008500 - PostgreSQL must separate user functionality (including user interface services) from database management functionality.

800-53|SC-2

CCI|CCI-001082

Rule-ID|SV-233588r1137655_rule

STIG-ID|CD12-00-008500

Vuln-ID|V-233588

CD12-00-009100 - Access to external executables must be disabled or restricted.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-233593r960963_rule

STIG-ID|CD12-00-009100

Vuln-ID|V-233593

CD12-00-009200 - Unused database components that are integrated in PostgreSQL and cannot be uninstalled must be disabled.

Rule-ID|SV-233594r960963_rule

STIG-ID|CD12-00-009200

Vuln-ID|V-233594

CD12-00-009400 - PostgreSQL must associate organization-defined types of security labels having organization-defined security label values with information in process.

CCI|CCI-002263

Rule-ID|SV-233595r1138541_rule

STIG-ID|CD12-00-009400

Vuln-ID|V-233595

CD12-00-009600 - PostgreSQL must enforce access restrictions associated with changes to the configuration of PostgreSQL or database(s).

800-53|CM-5(1)

CCI|CCI-001813

Rule-ID|SV-233597r961461_rule

STIG-ID|CD12-00-009600

Vuln-ID|V-233597

CD12-00-009900 - The system must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

800-53|AU-5(1)

CCI|CCI-001855

Rule-ID|SV-233599r961398_rule

STIG-ID|CD12-00-009900

Vuln-ID|V-233599

CD12-00-010200 - PostgreSQL must enforce authorized access to all PKI private keys stored/utilized by PostgreSQL.

800-53|IA-5(2)(b)

CCI|CCI-000186

Rule-ID|SV-233602r961041_rule

STIG-ID|CD12-00-010200

Vuln-ID|V-233602

CD12-00-010700 - PostgreSQL must protect its audit features from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-233607r960939_rule

STIG-ID|CD12-00-010700

Vuln-ID|V-233607

CD12-00-011200 - PostgreSQL must protect its audit features from unauthorized removal.

CCI|CCI-001495

Rule-ID|SV-233609r960945_rule

STIG-ID|CD12-00-011200

Vuln-ID|V-233609

CD12-00-011500 - PostgreSQL must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

800-53|IA-2

CCI|CCI-000764

Rule-ID|SV-233612r1051115_rule

STIG-ID|CD12-00-011500

Vuln-ID|V-233612

CD12-00-011800 - PostgreSQL must map the PKI-authenticated identity to an associated user account.

800-53|IA-5(2)(c)

CCI|CCI-000187

Rule-ID|SV-233615r961044_rule

Detections

Analytics

DISA STIG Crunchy Data PostgreSQL OS v3r2

Audit Details

File Details

Audit Changelog

No revisions found