DISA_STIG_MongoDB_Enterprise_Advanced_3.x_DB_v2r1.audit from DISA MongoDB Enterprise Advanced 3.x v2r1 STIG

MD3X-00-000020 - MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

800-53|AC-3

CAT|I

CCI|CCI-000213

Rule-ID|SV-221159r822435_rule

STIG-ID|MD3X-00-000020

STIG-Legacy|SV-96559

STIG-Legacy|V-81845

Vuln-ID|V-221159

MD3X-00-000270 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to MongoDB, etc.) must be restricted to authorized users.

800-53|CM-5(6)

CAT|II

CCI|CCI-001499

Rule-ID|SV-221165r531244_rule

STIG-ID|MD3X-00-000270

STIG-Legacy|SV-96571

STIG-Legacy|V-81857

Vuln-ID|V-221165

MD3X-00-000310 - MongoDB must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

800-53|IA-2

CCI|CCI-000764

Rule-ID|SV-221168r411000_rule

STIG-ID|MD3X-00-000310

STIG-Legacy|SV-96577

STIG-Legacy|V-81863

Vuln-ID|V-221168

MD3X-00-000370 - MongoDB must map the PKI-authenticated identity to an associated user account.

800-53|IA-5(2)(c)

CCI|CCI-000187

Rule-ID|SV-221173r411015_rule

STIG-ID|MD3X-00-000370

STIG-Legacy|SV-96587

STIG-Legacy|V-81873

Vuln-ID|V-221173

MD3X-00-000390 - MongoDB must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

800-53|IA-8

800-53|SC-2

800-53|SC-3

CCI|CCI-000804

CCI|CCI-001082

CCI|CCI-001084

Rule-ID|SV-221175r411021_rule

STIG-ID|MD3X-00-000390

STIG-Legacy|SV-96591

STIG-Legacy|V-81877

Vuln-ID|V-221175

MD3X-00-000540 - MongoDB must associate organization-defined types of security labels having organization-defined security label values with information in storage.

800-53|AC-16a.

CCI|CCI-002262

CCI|CCI-002263

CCI|CCI-002264

Rule-ID|SV-221185r411051_rule

STIG-ID|MD3X-00-000540

STIG-Legacy|SV-96611

STIG-Legacy|V-81897

Vuln-ID|V-221185

MD3X-00-000570 - MongoDB must enforce discretionary access control policies, as defined by the data owner, over defined subjects and objects.

800-53|AC-3(4)

800-53|AC-6(10)

CCI|CCI-002165

CCI|CCI-002235

Rule-ID|SV-221186r411054_rule

STIG-ID|MD3X-00-000570

STIG-Legacy|SV-96613

STIG-Legacy|V-81899

Vuln-ID|V-221186

MD3X-00-000650 - MongoDB must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.

800-53|CM-11(2)

CCI|CCI-001812

Rule-ID|SV-221191r411069_rule

STIG-ID|MD3X-00-000650

STIG-Legacy|SV-96623

STIG-Legacy|V-81909

Vuln-ID|V-221191

MD3X-00-000670 - MongoDB must enforce access restrictions associated with changes to the configuration of MongoDB or database(s).

800-53|CM-5(1)

CCI|CCI-001813

Rule-ID|SV-221192r411072_rule

STIG-ID|MD3X-00-000670

STIG-Legacy|SV-96625

STIG-Legacy|V-81911

Vuln-ID|V-221192

MD3X-00-000780 - When invalid inputs are received, MongoDB must behave in a predictable and documented manner that reflects organizational and system objectives.

800-53|SI-10(3)

CCI|CCI-002754

Rule-ID|SV-221199r411093_rule

STIG-ID|MD3X-00-000780

STIG-Legacy|SV-96639

STIG-Legacy|V-81925

Vuln-ID|V-221199

Detections

Analytics

DISA STIG MongoDB Enterprise Advanced 3.x v2r1 DB

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Mar 7, 2023 Miscellaneous Metadata updated. References updated.
Revision 1.1 Jun 3, 2022 Miscellaneous Metadata updated.

Detections

Analytics

DISA STIG MongoDB Enterprise Advanced 3.x v2r1 DB Download File

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

DISA STIG MongoDB Enterprise Advanced 3.x v2r1 DB