DISA_STIG_MongoDB_Enterprise_Advanced_8.x_v1r1_Unix.audit from DISA MongoDB Enterprise Advanced 8.x STIG v1r1

MD8X-00-000150 - MongoDB must limit the total number of concurrent connections to the database.

800-53|AC-10

CAT|III

CCI|CCI-000054

Rule-ID|SV-279331r1179501_rule

STIG-ID|MD8X-00-000150

Vuln-ID|V-279331

MD8X-00-000200 - MongoDB must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

800-53|AC-2(1)

CAT|I

CCI|CCI-000015

Rule-ID|SV-279332r1179502_rule

STIG-ID|MD8X-00-000200

Vuln-ID|V-279332

MD8X-00-000400 - MongoDB must provide audit record generation for DOD-defined auditable events within all DBMS/database components.

800-53|AU-3

800-53|AU-3(1)

800-53|AU-10

800-53|AU-12a.

800-53|AU-12b.

800-53|AU-12c.

800-53|AU-14(1)

CAT|II

CCI|CCI-000130

CCI|CCI-000131

CCI|CCI-000132

CCI|CCI-000133

CCI|CCI-000134

CCI|CCI-000135

CCI|CCI-000166

CCI|CCI-000169

CCI|CCI-000171

CCI|CCI-000172

CCI|CCI-001464

CCI|CCI-001487

CCI|CCI-003821

CCI|CCI-003831

CCI|CCI-003938

Rule-ID|SV-279334r1179504_rule

STIG-ID|MD8X-00-000400

Vuln-ID|V-279334

MD8X-00-002000 - The audit information produced by MongoDB must be protected from unauthorized access, modification, and deletion.

800-53|AU-9

CCI|CCI-000162

CCI|CCI-000163

CCI|CCI-000164

Rule-ID|SV-279336r1179505_rule

STIG-ID|MD8X-00-002000

Vuln-ID|V-279336

MD8X-00-002300 - MongoDB must protect its audit features from unauthorized access, modification, and removal.

CCI|CCI-001493

CCI|CCI-001494

CCI|CCI-001495

Rule-ID|SV-279337r1179178_rule

STIG-ID|MD8X-00-002300

Vuln-ID|V-279337

MD8X-00-002400 - MongoDB must limit privileges to change software modules, to include stored procedures, functions and triggers, and links to software external to MongoDB.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-279338r1179445_rule

STIG-ID|MD8X-00-002400

Vuln-ID|V-279338

MD8X-00-002500 - MongoDB software installation account must be restricted to authorized users.

Rule-ID|SV-279339r1179184_rule

STIG-ID|MD8X-00-002500

Vuln-ID|V-279339

MD8X-00-002600 - MongoDB database software, including configuration files, must be stored in dedicated directories, or DASD pools, separate from the host OS and other applications.

Rule-ID|SV-279340r1179187_rule

STIG-ID|MD8X-00-002600

Vuln-ID|V-279340

MD8X-00-003000 - Unused database components, MongoDB software, and database objects must be removed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-279344r1179199_rule

STIG-ID|MD8X-00-003000

Vuln-ID|V-279344

MD8X-00-003300 - MongoDB must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-279346r1179449_rule

STIG-ID|MD8X-00-003300

Vuln-ID|V-279346

MD8X-00-003700 - If passwords are used for authentication, MongoDB must transmit only encrypted representations of passwords.

800-53|IA-5(1)(c)

800-53|IA-5(2)(a)

CCI|CCI-000185

CCI|CCI-000197

Rule-ID|SV-279350r1179454_rule

STIG-ID|MD8X-00-003700

Vuln-ID|V-279350

MD8X-00-003900 - MongoDB must enforce authorized access to all PKI private keys stored/used by the DBMS.

800-53|IA-5(2)(b)

CCI|CCI-000186

Rule-ID|SV-279351r1179509_rule

STIG-ID|MD8X-00-003900

Vuln-ID|V-279351

MD8X-00-004100 - MongoDB must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

800-53|IA-6

800-53|SC-13

CCI|CCI-000206

CCI|CCI-002450

Rule-ID|SV-279353r1179226_rule

STIG-ID|MD8X-00-004100

Vuln-ID|V-279353

MD8X-00-004200 - MongoDB must use NIST FIPS 140-2/140-3 validated cryptographic modules for cryptographic operations.

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-279354r1179510_rule

STIG-ID|MD8X-00-004200

Vuln-ID|V-279354

MD8X-00-004700 - MongoDB must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values.

800-53|SC-23(3)

CCI|CCI-001188

Rule-ID|SV-279358r1179465_rule

STIG-ID|MD8X-00-004700

Vuln-ID|V-279358

MD8X-00-005000 - MongoDB must protect the confidentiality and integrity of all information at rest.

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-279361r1179250_rule

STIG-ID|MD8X-00-005000

Vuln-ID|V-279361

MD8X-00-005400 - Access to database files must be limited to relevant processes and to authorized, administrative users.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-279364r1179259_rule

STIG-ID|MD8X-00-005400

Vuln-ID|V-279364

MD8X-00-005600 - MongoDB and associated applications must reserve the use of dynamic code execution for situations that require it.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-279366r1179512_rule

STIG-ID|MD8X-00-005600

Vuln-ID|V-279366

MD8X-00-006050 - MongoDB must terminate a user session after organization-defined conditions or trigger events requiring session disconnect via a scheduled script.

800-53|AC-12

CCI|CCI-002361

Rule-ID|SV-281700r1179499_rule

STIG-ID|MD8X-00-006050

Vuln-ID|V-281700

MD8X-00-006500 - MongoDB must enforce Discretionary Access Control (DAC) policies, as defined by the data owner, over defined subjects and objects.

800-53|AC-3(4)

CCI|CCI-002165

Rule-ID|SV-279372r1179475_rule

STIG-ID|MD8X-00-006500

Vuln-ID|V-279372

MD8X-00-006900 - MongoDB must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

800-53|AU-5(1)

CCI|CCI-001855

Rule-ID|SV-279376r1179479_rule

STIG-ID|MD8X-00-006900

Vuln-ID|V-279376

MD8X-00-007700 - MongoDB must require users to reauthenticate when organization-defined circumstances or situations require reauthentication.

800-53|IA-11

CCI|CCI-002038

Rule-ID|SV-279383r1179483_rule

STIG-ID|MD8X-00-007700

Vuln-ID|V-279383

MD8X-00-008000 - MongoDB must only accept end entity certificates issued by DOD PKI or DOD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

800-53|SC-23(5)

CCI|CCI-002470

Rule-ID|SV-279386r1192925_rule

STIG-ID|MD8X-00-008000

Vuln-ID|V-279386

MD8X-00-008100 - MongoDB must implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.

800-53|SC-28(1)

CCI|CCI-002475

CCI|CCI-002476

Rule-ID|SV-279387r1179328_rule

STIG-ID|MD8X-00-008100

Vuln-ID|V-279387

MD8X-00-008400 - MongoDB must maintain the confidentiality and integrity of information during preparation for transmission.

800-53|SC-8(2)

CCI|CCI-002420

CCI|CCI-002422

Rule-ID|SV-279389r1179334_rule

STIG-ID|MD8X-00-008400

Vuln-ID|V-279389

MD8X-00-008700 - When updates are applied to MongoDB software, any software components that have been replaced or made unnecessary must be removed.

800-53|SI-2(6)

CCI|CCI-002617

Rule-ID|SV-279391r1179488_rule

STIG-ID|MD8X-00-008700

Vuln-ID|V-279391

MD8X-00-008800 - Security-relevant software updates to MongoDB must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

800-53|SI-2c.

CCI|CCI-002605

Rule-ID|SV-279392r1179521_rule

STIG-ID|MD8X-00-008800

Vuln-ID|V-279392

MD8X-00-008900 - MongoDB must be a version supported by the vendor.

800-53|SA-22a.

CCI|CCI-003376

Rule-ID|SV-279393r1179522_rule

STIG-ID|MD8X-00-008900

Vuln-ID|V-279393

MD8X-00-012100 - MongoDB must off-load audit data to a separate log management facility; this shall be continuous and in near real time for systems with a network connection to the storage facility and weekly or more often for stand-alone systems.

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-279394r1179490_rule

Detections

Analytics

Revision 1.1Oct 22, 2026

Functional Update

Miscellaneous