MADB-10-000100 - MariaDB must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

800-53|AC-10

CAT|III

CCI|CCI-000054

Rule-ID|SV-253666r960735_rule

STIG-ID|MADB-10-000100

Vuln-ID|V-253666

MADB-10-000200 - MariaDB must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

800-53|AC-2(1)

CAT|I

CCI|CCI-000015

Rule-ID|SV-253667r1136896_rule

STIG-ID|MADB-10-000200

Vuln-ID|V-253667

MADB-10-000300 - MariaDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

800-53|AC-3

CCI|CCI-000213

Rule-ID|SV-253668r1137654_rule

STIG-ID|MADB-10-000300

Vuln-ID|V-253668

MADB-10-000400 - MariaDB must protect against a user falsely repudiating having performed organization-defined actions.

800-53|AU-10

CAT|II

CCI|CCI-000166

Rule-ID|SV-253669r960864_rule

STIG-ID|MADB-10-000400

Vuln-ID|V-253669

MADB-10-000500 - MariaDB must provide audit record generation capability for DoD-defined auditable events within all DBMS/database components.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-253670r960879_rule

STIG-ID|MADB-10-000500

Vuln-ID|V-253670

MADB-10-000600 - MariaDB must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

800-53|AU-12b.

CCI|CCI-000171

Rule-ID|SV-253671r960882_rule

STIG-ID|MADB-10-000600

Vuln-ID|V-253671

MADB-10-000700 - MariaDB must be able to generate audit records when privileges/permissions are retrieved.

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-253672r960885_rule

STIG-ID|MADB-10-000700

Vuln-ID|V-253672

MADB-10-000900 - MariaDB must initiate session auditing upon startup.

800-53|AU-14(1)

CCI|CCI-001464

Rule-ID|SV-253674r960888_rule

STIG-ID|MADB-10-000900

Vuln-ID|V-253674

MADB-10-001000 - MariaDB must produce audit records containing sufficient information to establish what type of events occurred.

800-53|AU-3

CCI|CCI-000130

Rule-ID|SV-253675r960891_rule

STIG-ID|MADB-10-001000

Vuln-ID|V-253675

MADB-10-001600 - MariaDB must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

800-53|AU-3(1)

CCI|CCI-000135

Rule-ID|SV-253676r960909_rule

STIG-ID|MADB-10-001600

Vuln-ID|V-253676

MADB-10-001800 - MariaDB must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.

800-53|AU-5b.

CCI|CCI-000140

Rule-ID|SV-253678r1043188_rule

STIG-ID|MADB-10-001800

Vuln-ID|V-253678

MADB-10-002000 - The audit information produced by MariaDB must be protected from unauthorized read access.

800-53|AU-9

CCI|CCI-000162

Rule-ID|SV-253679r960930_rule

STIG-ID|MADB-10-002000

Vuln-ID|V-253679

MADB-10-002100 - The audit information produced by MariaDB must be protected from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-253680r960933_rule

STIG-ID|MADB-10-002100

Vuln-ID|V-253680

MADB-10-002200 - The audit information produced by MariaDB must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-253681r960936_rule

STIG-ID|MADB-10-002200

Vuln-ID|V-253681

MADB-10-002300 - MariaDB must protect its audit features from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-253682r960939_rule

STIG-ID|MADB-10-002300

Vuln-ID|V-253682

MADB-10-002400 - MariaDB must protect its audit configuration from unauthorized modification.

CCI|CCI-001494

Rule-ID|SV-253683r960942_rule

STIG-ID|MADB-10-002400

Vuln-ID|V-253683

MADB-10-002500 - MariaDB must protect its audit features from unauthorized removal.

CCI|CCI-001495

Rule-ID|SV-253684r960945_rule

STIG-ID|MADB-10-002500

Vuln-ID|V-253684

MADB-10-002600 - MariaDB must limit privileges to change software modules, to include stored procedures, functions and triggers, and links to software external to the DBMS.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-253685r960960_rule

STIG-ID|MADB-10-002600

Vuln-ID|V-253685

MADB-10-002900 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to MariaDB, etc.) must be owned by database/MariaDB principals authorized for ownership.

Rule-ID|SV-253688r960960_rule

STIG-ID|MADB-10-002900

Vuln-ID|V-253688

MADB-10-003000 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to the MariaDB, etc.) must be restricted to authorized users.

Rule-ID|SV-253689r960960_rule

STIG-ID|MADB-10-003000

Vuln-ID|V-253689

MADB-10-003100 - Default demonstration and sample databases, database objects, and applications must be removed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-253690r960963_rule

STIG-ID|MADB-10-003100

Vuln-ID|V-253690

MADB-10-003200 - Unused database components, DBMS software, and database objects must be removed.

Rule-ID|SV-253691r960963_rule

STIG-ID|MADB-10-003200

Vuln-ID|V-253691

MADB-10-003400 - Access to external executables must be disabled or restricted.

Rule-ID|SV-253692r960963_rule

STIG-ID|MADB-10-003400

Vuln-ID|V-253692

MADB-10-003500 - MariaDB must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-253693r1043177_rule

STIG-ID|MADB-10-003500

Vuln-ID|V-253693

MADB-10-003600 - MariaDB must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

800-53|IA-2

CCI|CCI-000764

Rule-ID|SV-253694r1051115_rule

STIG-ID|MADB-10-003600

Vuln-ID|V-253694

MADB-10-003700 - If MariaDB authentication, using passwords, is employed, then MariaDB must enforce the DOD standards for password complexity.

800-53|IA-5(1)(a)

CCI|CCI-000192

CCI|CCI-004066

Rule-ID|SV-253695r1018598_rule

STIG-ID|MADB-10-003700

Vuln-ID|V-253695

MADB-10-003750 - If MariaDB authentication using passwords is employed, MariaDB must enforce the DOD standards for password lifetime.

Rule-ID|SV-253696r1018599_rule

STIG-ID|MADB-10-003750

Vuln-ID|V-253696

MADB-10-003900 - If passwords are used for authentication, MariaDB must transmit only encrypted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-253698r961029_rule

STIG-ID|MADB-10-003900

Vuln-ID|V-253698

MADB-10-004000 - MariaDB, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-253699r961038_rule

STIG-ID|MADB-10-004000

Vuln-ID|V-253699

MADB-10-004200 - MariaDB must map PKI ID to an associated user account.

800-53|IA-5(2)(c)

CCI|CCI-000187

Rule-ID|SV-253701r961044_rule

STIG-ID|MADB-10-004200

Vuln-ID|V-253701

MADB-10-004500 - The MariaDB must uniquely identify and authenticate nonorganizational users (or processes acting on behalf of nonorganizational users).

800-53|IA-8

CCI|CCI-000804

Rule-ID|SV-253704r961053_rule

STIG-ID|MADB-10-004500

Vuln-ID|V-253704

MADB-10-004600 - MariaDB must separate user functionality (including user interface services) from database management functionality.

800-53|SC-2

CCI|CCI-001082

Rule-ID|SV-253705r1137655_rule

STIG-ID|MADB-10-004600

Vuln-ID|V-253705

MADB-10-004700 - MariaDB must invalidate session identifiers upon user logout or other session termination.

800-53|SC-23(1)

CCI|CCI-001185

Rule-ID|SV-253706r1043179_rule

STIG-ID|MADB-10-004700

Vuln-ID|V-253706

MADB-10-004900 - MariaDB must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values.

800-53|SC-23(3)

CCI|CCI-001188

Rule-ID|SV-253707r1043181_rule

STIG-ID|MADB-10-004900

Vuln-ID|V-253707

MADB-10-005000 - MariaDB must fail to a secure state if system initialization fails, shutdown fails, or aborts fail.

800-53|SC-24

CCI|CCI-001190

Rule-ID|SV-253708r961122_rule

STIG-ID|MADB-10-005000

Vuln-ID|V-253708

MADB-10-005100 - In the event of a system failure, MariaDB must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes.

CCI|CCI-001665

Detections

Analytics

DISA MariaDB Enterprise 10.x STIG v2r5 MySQLDB

Audit Details

File Details

Audit Changelog

No revisions found