DISA_STIG_MariaDB_Enterprise_10.x_v2r4_OS_Linux.audit from DISA MariaDB Enterprise 10.x v2r4 STIG

MADB-10-004400 - MariaDB must use NIST FIPS 140-2/140-3 validated cryptographic modules for cryptographic operations.

CAT|I

CCI|CCI-000803

Rule-ID|SV-253703r1136902_rule

STIG-ID|MADB-10-004400

Vuln-ID|V-253703

MADB-10-008500 - MariaDB must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

CAT|II

CCI|CCI-002470

Rule-ID|SV-253738r961596_rule

STIG-ID|MADB-10-008500

Vuln-ID|V-253738

MADB-10-009200 - When updates are applied to the MariaDB software, any software components that have been replaced or made unnecessary must be removed.

CCI|CCI-002617

Rule-ID|SV-253744r961677_rule

STIG-ID|MADB-10-009200

Vuln-ID|V-253744

MADB-10-009300 - Security-relevant software updates to MariaDB must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

CCI|CCI-002605

Rule-ID|SV-253745r1117151_rule

STIG-ID|MADB-10-009300

Vuln-ID|V-253745

MADB-10-012100 - MariaDB must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures.

CCI|CCI-002450

Rule-ID|SV-253773r961857_rule

STIG-ID|MADB-10-012100

Vuln-ID|V-253773

MADB-10-012200 - MariaDB must implement NIST FIPS 140-2 validated cryptographic modules to generate and validate cryptographic hashes.

Rule-ID|SV-253774r961857_rule

STIG-ID|MADB-10-012200

Vuln-ID|V-253774

MADB-10-012300 - MariaDB must implement NIST FIPS 140-2 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the data owners requirements.

Detections

Analytics

DISA MariaDB Enterprise 10.x v2r4 OS Linux

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous