Detections
Analytics

DISA STIG MongoDB Enterprise Advanced 3.x v1r2

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: DISA STIG MongoDB Enterprise Advanced 3.x v1r2

Updated: 5/27/2022

Authority: DISA STIG

Plugin: MongoDB

Revision: 1.4

Estimated Item Count: 11

File Details

Filename: DISA_STIG_MongoDB_Enterprise_Advanced_3.x_DB_v1r2.audit

Size: 27.3 kB

MD5: 49177fc4fc2e1e6c84caa33390195faa
SHA256: 3319406f98b68308cdd3c42108f9e78ae9a9115a6677ec36451e53f6a6b2f5e2

Audit Items

DescriptionCategories
DISA_STIG_MongoDB_Enterprise_Advanced_3.x_DB_v1r2.audit
MD3X-00-000020 - MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

ACCESS CONTROL

MD3X-00-000270 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to MongoDB, etc.) must be restricted to authorized users.

ACCESS CONTROL

MD3X-00-000310 - MongoDB must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

ACCESS CONTROL

MD3X-00-000370 - MongoDB must map the PKI-authenticated identity to an associated user account.

ACCESS CONTROL

MD3X-00-000390 - MongoDB must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

ACCESS CONTROL

MD3X-00-000540 - MongoDB must associate organization-defined types of security labels having organization-defined security label values with information in storage.
MD3X-00-000570 - MongoDB must enforce discretionary access control policies, as defined by the data owner, over defined subjects and objects.

ACCESS CONTROL

MD3X-00-000650 - MongoDB must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.

ACCESS CONTROL

MD3X-00-000670 - MongoDB must enforce access restrictions associated with changes to the configuration of MongoDB or database(s).

ACCESS CONTROL

MD3X-00-000780 - When invalid inputs are received, MongoDB must behave in a predictable and documented manner that reflects organizational and system objectives.