EP11-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types - Administrators

CAT|II

CCI|CCI-000054

Rule-ID|SV-224130r508023_rule

STIG-ID|EP11-00-000100

STIG-Legacy|SV-109391

STIG-Legacy|V-100287

Vuln-ID|V-224130

EP11-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types - Users

EP11-00-000800 - The EDB Postgres Advanced Server must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

CAT|I

CCI|CCI-000213

Rule-ID|SV-224132r836872_rule

STIG-ID|EP11-00-000800

STIG-Legacy|SV-109395

STIG-Legacy|V-100291

Vuln-ID|V-224132

EP11-00-000900 - The EDB Postgres Advanced Server must protect against a user falsely repudiating by ensuring all accounts are individual, unique, and not shared.

CCI|CCI-000166

Rule-ID|SV-224133r508023_rule

STIG-ID|EP11-00-000900

STIG-Legacy|SV-109397

STIG-Legacy|V-100293

Vuln-ID|V-224133

EP11-00-001000 - The EDB Postgres Advanced Server must be configured to provide audit record generation capability for DoD-defined auditable events within all EDB Postgres Advanced Server/database components.

CCI|CCI-000169

Rule-ID|SV-224134r508023_rule

STIG-ID|EP11-00-001000

STIG-Legacy|SV-109399

STIG-Legacy|V-100295

Vuln-ID|V-224134

EP11-00-001200 - The EDB Postgres Advanced Server must generate audit records for DoD-defined auditable events.

CCI|CCI-000131

CCI|CCI-000134

CCI|CCI-000172

CCI|CCI-001487

CCI|CCI-001814

Rule-ID|SV-224136r557457_rule

STIG-ID|EP11-00-001200

STIG-Legacy|SV-109403

STIG-Legacy|V-100299

Vuln-ID|V-224136

EP11-00-001400 - The EDB Postgres Advanced Server must initiate support of session auditing upon startup - edb_audit

CCI|CCI-001464

Rule-ID|SV-224138r508023_rule

STIG-ID|EP11-00-001400

STIG-Legacy|SV-109407

STIG-Legacy|V-100303

Vuln-ID|V-224138

EP11-00-001400 - The EDB Postgres Advanced Server must initiate support of session auditing upon startup - edb_audit_statement

EP11-00-002200 - The EDB Postgres Advanced Server must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-224145r508023_rule

STIG-ID|EP11-00-002200

STIG-Legacy|SV-109421

STIG-Legacy|V-100317

Vuln-ID|V-224145

EP11-00-003210 - EDB Postgres Advanced Server software modules, to include stored procedures, functions, and triggers must be monitored to discover unauthorized changes.

CCI|CCI-001499

Rule-ID|SV-224155r508023_rule

STIG-ID|EP11-00-003210

STIG-Legacy|SV-109441

STIG-Legacy|V-100337

Vuln-ID|V-224155

EP11-00-003300 - The EDB Postgres Advanced Server software installation account must be restricted to authorized users.

Rule-ID|SV-224156r836873_rule

STIG-ID|EP11-00-003300

STIG-Legacy|SV-109443

STIG-Legacy|V-100339

Vuln-ID|V-224156

EP11-00-003500 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be owned by database/EDB Postgres Advanced Server principals authorized for ownership.

Rule-ID|SV-224158r508023_rule

STIG-ID|EP11-00-003500

STIG-Legacy|SV-109447

STIG-Legacy|V-100343

Vuln-ID|V-224158

EP11-00-003700 - Default, demonstration and sample databases, database objects, and applications must be removed.

CCI|CCI-000381

Rule-ID|SV-224160r508023_rule

STIG-ID|EP11-00-003700

STIG-Legacy|SV-109451

STIG-Legacy|V-100347

Vuln-ID|V-224160

EP11-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments - address

CCI|CCI-000382

Rule-ID|SV-224164r508023_rule

STIG-ID|EP11-00-004100

STIG-Legacy|SV-109459

STIG-Legacy|V-100355

Vuln-ID|V-224164

EP11-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments - port

EP11-00-004250 - If DBMS authentication, using passwords, is employed, EDB Postgres Advanced Server must enforce the DoD standards for password complexity and lifetime.

CCI|CCI-000192

Rule-ID|SV-224166r836874_rule

STIG-ID|EP11-00-004250

STIG-Legacy|SV-109463

STIG-Legacy|V-100359

Vuln-ID|V-224166

EP11-00-004300 - If passwords are used for authentication, the EDB Postgres Advanced Server must store only hashed, salted representations of passwords.

CCI|CCI-000196

Rule-ID|SV-224167r836875_rule

STIG-ID|EP11-00-004300

STIG-Legacy|SV-109465

STIG-Legacy|V-100361

Vuln-ID|V-224167

EP11-00-004810 - Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

CCI|CCI-000206

Rule-ID|SV-224171r508023_rule

STIG-ID|EP11-00-004810

STIG-Legacy|SV-109473

STIG-Legacy|V-100369

Vuln-ID|V-224171

EP11-00-004820 - When using command-line tools such as psql, users must use a logon method that does not expose the password.

Rule-ID|SV-224172r508023_rule

STIG-ID|EP11-00-004820

STIG-Legacy|SV-109475

STIG-Legacy|V-100371

Vuln-ID|V-224172

EP11-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection - version

CCI|CCI-000803

CCI|CCI-002450

Rule-ID|SV-224174r836880_rule

STIG-ID|EP11-00-004900

STIG-Legacy|SV-109477

STIG-Legacy|V-100373

Vuln-ID|V-224174

EP11-00-005000 - The DBMS must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

CCI|CCI-000804

Rule-ID|SV-224175r508023_rule

STIG-ID|EP11-00-005000

STIG-Legacy|SV-109479

STIG-Legacy|V-100375

Vuln-ID|V-224175

EP11-00-005100 - The EDB Postgres Advanced Server must separate user functionality (including user interface services) from database management functionality.

CCI|CCI-001082

Rule-ID|SV-224176r508023_rule

STIG-ID|EP11-00-005100

STIG-Legacy|SV-110299

STIG-Legacy|V-101195

Vuln-ID|V-224176

EP11-00-005600 - In the event of a system failure, the DBMS must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes.

CCI|CCI-001665

Rule-ID|SV-224177r508023_rule

STIG-ID|EP11-00-005600

STIG-Legacy|SV-109481

STIG-Legacy|V-100377

Vuln-ID|V-224177

EP11-00-005800 - The EDB Postgres Advanced Server must isolate security functions from non-security functions.

CCI|CCI-001084

Rule-ID|SV-224179r508023_rule

STIG-ID|EP11-00-005800

STIG-Legacy|SV-109485

STIG-Legacy|V-100381

Vuln-ID|V-224179

EP11-00-005900 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

CCI|CCI-001090

Rule-ID|SV-224180r508023_rule

STIG-ID|EP11-00-005900

STIG-Legacy|SV-109487

STIG-Legacy|V-100383

Vuln-ID|V-224180

EP11-00-006200 - The EDB Postgres Advanced Server must check the validity of all data inputs except those specifically identified by the organization.

CCI|CCI-001310

Rule-ID|SV-224182r508023_rule

STIG-ID|EP11-00-006200

STIG-Legacy|SV-109491

STIG-Legacy|V-100387

Vuln-ID|V-224182

EP11-00-006300 - The EDB Postgres Advanced Server and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-224183r508023_rule

STIG-ID|EP11-00-006300

STIG-Legacy|SV-109493

STIG-Legacy|V-100389

Vuln-ID|V-224183

EP11-00-006400 - The EDB Postgres Advanced Server and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-224184r508023_rule

STIG-ID|EP11-00-006400

STIG-Legacy|SV-109495

STIG-Legacy|V-100391

Vuln-ID|V-224184

EP11-00-006500 - The EDB Postgres Advanced Server must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

CCI|CCI-001312

Rule-ID|SV-224185r508023_rule

STIG-ID|EP11-00-006500

STIG-Legacy|SV-109497

STIG-Legacy|V-100393

Vuln-ID|V-224185

EP11-00-006600 - The EDB Postgres Advanced Server must reveal detailed error messages only to the ISSO, ISSM, SA, and DBA.

CCI|CCI-001314

Rule-ID|SV-224186r508023_rule

STIG-ID|EP11-00-006600

STIG-Legacy|SV-109499

STIG-Legacy|V-100395

Vuln-ID|V-224186

EP11-00-006700 - The EDB Postgres Advanced Server must automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.

CCI|CCI-002361

Rule-ID|SV-224187r508023_rule

STIG-ID|EP11-00-006700

STIG-Legacy|SV-109501

STIG-Legacy|V-100397

Vuln-ID|V-224187

Detections

Analytics

EDB PostgreSQL Advanced Server v11 DB Audit v2r2

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous