DISA_STIG_Oracle_Database_11.2g_v2r3_DB.audit from DISA Oracle Database 11.2g v2r3 STIG

O112-BP-021200 - Access to default accounts used to support replication must be restricted to authorized DBAs.

800-53|CM-6b.

CAT|II

CCI|CCI-000366

Rule-ID|SV-219695r401224_rule

STIG-ID|O112-BP-021200

STIG-Legacy|SV-68201

STIG-Legacy|V-53961

Vuln-ID|V-219695

O112-BP-021300 - Oracle instance names must not contain Oracle version numbers.

Rule-ID|SV-219696r401224_rule

STIG-ID|O112-BP-021300

STIG-Legacy|SV-68203

STIG-Legacy|V-53963

Vuln-ID|V-219696

O112-BP-021400 - Fixed user and public database links must be authorized for use - 'DB Links'

Rule-ID|SV-219697r401224_rule

STIG-ID|O112-BP-021400

STIG-Legacy|SV-68205

STIG-Legacy|V-53965

Vuln-ID|V-219697

O112-BP-021400 - Fixed user and public database links must be authorized for use - 'repcatlog count = 0'

O112-BP-021500 - A minimum of two Oracle control files must be defined and configured to be stored on separate, archived disks (physical or virtual) or archived partitions on a RAID device.

CAT|III

Rule-ID|SV-219698r401224_rule

STIG-ID|O112-BP-021500

STIG-Legacy|SV-68207

STIG-Legacy|V-53967

Vuln-ID|V-219698

O112-BP-021600 - A minimum of two Oracle redo log groups/files must be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device - V$LOG count

Rule-ID|SV-219699r401224_rule

STIG-ID|O112-BP-021600

STIG-Legacy|SV-68209

STIG-Legacy|V-53969

Vuln-ID|V-219699

O112-BP-021600 - A minimum of two Oracle redo log groups/files must be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device - V$LOG members count

O112-BP-021700 - The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA or non-Application administrator user accounts.

Rule-ID|SV-219700r401224_rule

STIG-ID|O112-BP-021700

STIG-Legacy|SV-68211

STIG-Legacy|V-53971

Vuln-ID|V-219700

O112-BP-021800 - Execute permission must be revoked from PUBLIC for restricted Oracle packages.

Rule-ID|SV-219701r401224_rule

STIG-ID|O112-BP-021800

STIG-Legacy|SV-68213

STIG-Legacy|V-53973

Vuln-ID|V-219701

O112-BP-021900 - The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.

CAT|I

Rule-ID|SV-219702r401224_rule

STIG-ID|O112-BP-021900

STIG-Legacy|SV-68215

STIG-Legacy|V-53975

Vuln-ID|V-219702

O112-BP-022000 - The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.

Rule-ID|SV-219703r401224_rule

STIG-ID|O112-BP-022000

STIG-Legacy|SV-68217

STIG-Legacy|V-53977

Vuln-ID|V-219703

O112-BP-022100 - The Oracle SQL92_SECURITY parameter must be set to TRUE.

Rule-ID|SV-219704r401224_rule

STIG-ID|O112-BP-022100

STIG-Legacy|SV-68219

STIG-Legacy|V-53979

Vuln-ID|V-219704

O112-BP-022200 - The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.

Rule-ID|SV-219705r401224_rule

STIG-ID|O112-BP-022200

STIG-Legacy|SV-68221

STIG-Legacy|V-53981

Vuln-ID|V-219705

O112-BP-022300 - System privileges granted using the WITH ADMIN OPTION must not be granted to unauthorized user accounts.

Rule-ID|SV-219706r401224_rule

STIG-ID|O112-BP-022300

STIG-Legacy|SV-68223

STIG-Legacy|V-53983

Vuln-ID|V-219706

O112-BP-022400 - System Privileges must not be granted to PUBLIC.

Rule-ID|SV-219707r401224_rule

STIG-ID|O112-BP-022400

STIG-Legacy|SV-68225

STIG-Legacy|V-53985

Vuln-ID|V-219707

O112-BP-022500 - Oracle roles granted using the WITH ADMIN OPTION must not be granted to unauthorized accounts.

Rule-ID|SV-219708r401224_rule

STIG-ID|O112-BP-022500

STIG-Legacy|SV-68227

STIG-Legacy|V-53987

Vuln-ID|V-219708

O112-BP-022600 - Object permissions granted to PUBLIC must be restricted.

Rule-ID|SV-219709r401224_rule

STIG-ID|O112-BP-022600

STIG-Legacy|SV-68229

STIG-Legacy|V-53989

Vuln-ID|V-219709

O112-BP-022800 - Application role permissions must not be assigned to the Oracle PUBLIC role.

Rule-ID|SV-219711r401224_rule

STIG-ID|O112-BP-022800

STIG-Legacy|SV-68233

STIG-Legacy|V-53993

Vuln-ID|V-219711

O112-BP-022900 - Oracle application administration roles must be disabled if not required and authorized.

Rule-ID|SV-219712r401224_rule

STIG-ID|O112-BP-022900

STIG-Legacy|SV-68235

STIG-Legacy|V-53995

Vuln-ID|V-219712

O112-BP-023000 - Connections by mid-tier web and application systems to the Oracle DBMS from a DMZ or external network must be encrypted.

Rule-ID|SV-219713r401224_rule

STIG-ID|O112-BP-023000

STIG-Legacy|SV-68237

STIG-Legacy|V-53997

Vuln-ID|V-219713

O112-BP-023100 - Database job/batch queues must be reviewed regularly to detect unauthorized database job submissions - job_queue_processes

Rule-ID|SV-219714r401224_rule

STIG-ID|O112-BP-023100

STIG-Legacy|SV-68239

STIG-Legacy|V-53999

Vuln-ID|V-219714

O112-BP-023100 - Database job/batch queues must be reviewed regularly to detect unauthorized database job submissions - MAX_JOB_SLAVE_PROCESSES

O112-BP-023200 - Unauthorized database links must not be defined and active.

Rule-ID|SV-219715r401224_rule

STIG-ID|O112-BP-023200

STIG-Legacy|SV-68241

STIG-Legacy|V-54001

Vuln-ID|V-219715

O112-BP-023300 - Sensitive information from production database exports must be modified before being imported into a development database.

Rule-ID|SV-219716r401224_rule

STIG-ID|O112-BP-023300

STIG-Legacy|SV-68243

STIG-Legacy|V-54003

Vuln-ID|V-219716

O112-BP-023600 - Only authorized system accounts must have the SYSTEM tablespace specified as the default tablespace - default tablespace

Rule-ID|SV-219719r401224_rule

STIG-ID|O112-BP-023600

STIG-Legacy|SV-68249

STIG-Legacy|V-54009

Vuln-ID|V-219719

O112-BP-023600 - Only authorized system accounts must have the SYSTEM tablespace specified as the default tablespace - non-default account records

O112-BP-023700 - Application owner accounts must have a dedicated application tablespace.

Rule-ID|SV-219720r401224_rule

STIG-ID|O112-BP-023700

STIG-Legacy|SV-68251

STIG-Legacy|V-54011

Vuln-ID|V-219720

O112-BP-023800 - The directories assigned to the LOG_ARCHIVE_DEST* parameters must be protected from unauthorized access.

Rule-ID|SV-219721r401224_rule

STIG-ID|O112-BP-023800

STIG-Legacy|SV-68253

STIG-Legacy|V-54013

Vuln-ID|V-219721

O112-BP-023900 - The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to FALSE.

Rule-ID|SV-219722r401224_rule

STIG-ID|O112-BP-023900

STIG-Legacy|SV-68255

STIG-Legacy|V-54015

Vuln-ID|V-219722

O112-BP-024000 - Application object owner accounts must be disabled when not performing installation or maintenance actions - dba roles

Rule-ID|SV-219723r401224_rule

STIG-ID|O112-BP-024000

STIG-Legacy|SV-68257

STIG-Legacy|V-54017

Vuln-ID|V-219723

O112-BP-024000 - Application object owner accounts must be disabled when not performing installation or maintenance actions - locked roles

O112-BP-024100 - DBMS production application and data directories must be protected from developers on shared production/development DBMS host systems.

Rule-ID|SV-219724r401224_rule

STIG-ID|O112-BP-024100

STIG-Legacy|SV-68259

STIG-Legacy|V-54019

Vuln-ID|V-219724

O112-BP-024200 - Use of the DBMS installation account must be logged.

Rule-ID|SV-219725r401224_rule

STIG-ID|O112-BP-024200

STIG-Legacy|SV-68261

STIG-Legacy|V-54021

Vuln-ID|V-219725

O112-BP-024750 - Oracle database products must be a version supported by the vendor.

800-53|SI-2c.

CCI|CCI-002605

Rule-ID|SV-251801r810846_rule

STIG-ID|O112-BP-024750

Vuln-ID|V-251801

O112-BP-025101 - The directory assigned to the AUDIT_FILE_DEST parameter must be protected from unauthorized access and must be stored in a dedicated directory or disk partition separate from software or other application files.

Detections

Analytics

DISA STIG Oracle 11.2g v2r3 Database

Audit Details

File Details

Audit Changelog

No revisions found