DISA_STIG_Oracle_Database_12c_v3r5_OS_Linux.audit from DISA Oracle Database 12c v3r5 STIG

O121-BP-022200 - The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.

800-53|CM-6b.

CAT|II

CCI|CCI-000366

Rule-ID|SV-219833r1018565_rule

STIG-ID|O121-BP-022200

STIG-Legacy|SV-75921

STIG-Legacy|V-61431

Vuln-ID|V-219833

O121-BP-022700 - The Oracle Listener must be configured to require administration authentication.

CAT|I

Rule-ID|SV-219838r961863_rule

STIG-ID|O121-BP-022700

STIG-Legacy|SV-75931

STIG-Legacy|V-61441

Vuln-ID|V-219838

O121-BP-024100 - DBMS production application and data directories must be protected from developers on shared production/development DBMS host systems.

Rule-ID|SV-219852r961863_rule

STIG-ID|O121-BP-024100

STIG-Legacy|SV-75977

STIG-Legacy|V-61487

Vuln-ID|V-219852

O121-BP-025400 - Access to DBMS software files and directories must not be granted to unauthorized users.

Rule-ID|SV-219865r961863_rule

STIG-ID|O121-BP-025400

STIG-Legacy|SV-76001

STIG-Legacy|V-61511

Vuln-ID|V-219865

O121-BP-025600 - Network access to the DBMS must be restricted to authorized personnel.

Rule-ID|SV-219867r961863_rule

STIG-ID|O121-BP-025600

STIG-Legacy|SV-76005

STIG-Legacy|V-61515

Vuln-ID|V-219867

O121-BP-026500 - Remote administration must be disabled for the Oracle connection manager.

Rule-ID|SV-219874r961863_rule

STIG-ID|O121-BP-026500

STIG-Legacy|SV-76023

STIG-Legacy|V-61533

Vuln-ID|V-219874

O121-BP-026600 - Network client connections must be restricted to supported versions.

Rule-ID|SV-219875r961863_rule

STIG-ID|O121-BP-026600

STIG-Legacy|SV-76025

STIG-Legacy|V-61535

Vuln-ID|V-219875

O121-C1-004500 - DBA OS accounts must be granted only those host system privileges necessary for the administration of the DBMS.

Rule-ID|SV-237696r961863_rule

STIG-ID|O121-C1-004500

STIG-Legacy|SV-76027

STIG-Legacy|V-61537

Vuln-ID|V-237696

O121-C1-015400 - The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key.

800-53|IA-5(2)(b)

CCI|CCI-000186

Rule-ID|SV-220263r961041_rule

STIG-ID|O121-C1-015400

STIG-Legacy|SV-76033

STIG-Legacy|V-61543

Vuln-ID|V-220263

O121-C1-019700 - The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures.

800-53|SC-8(1)

CCI|CCI-002421

Rule-ID|SV-237699r961638_rule

STIG-ID|O121-C1-019700

STIG-Legacy|SV-76035

STIG-Legacy|V-61545

Vuln-ID|V-237699

O121-C2-001700 - The DBMS must support the disabling of network protocols deemed by the organization to be nonsecure.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-237700r1043177_rule

STIG-ID|O121-C2-001700

STIG-Legacy|SV-76045

STIG-Legacy|V-61555

Vuln-ID|V-237700

O121-C2-004400 - OS accounts utilized to run external procedures called by the DBMS must have limited privileges.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-237712r960963_rule

STIG-ID|O121-C2-004400

STIG-Legacy|SV-76091

STIG-Legacy|V-61601

Vuln-ID|V-237712

O121-C2-011810 - Access to external executables must be disabled or restricted.

Rule-ID|SV-220288r960963_rule

STIG-ID|O121-C2-011810

STIG-Legacy|SV-76175

STIG-Legacy|V-61685

Vuln-ID|V-220288

O121-C2-012900 - The DBMS must use multifactor authentication for access to user accounts.

800-53|IA-2(1)

800-53|IA-2(2)

800-53|IA-2(3)

800-53|IA-2(4)

CCI|CCI-000765

CCI|CCI-000766

CCI|CCI-000767

CCI|CCI-000768

Rule-ID|SV-237723r1043176_rule

STIG-ID|O121-C2-012900

STIG-Legacy|SV-76193

STIG-Legacy|V-61703

Vuln-ID|V-237723

O121-C2-014600 - The DBMS must support organizational requirements to enforce password encryption for storage.

800-53|IA-5(1)(c)

CCI|CCI-000196

CCI|CCI-004062

Rule-ID|SV-220290r1015773_rule

STIG-ID|O121-C2-014600

STIG-Legacy|SV-76223

STIG-Legacy|V-61733

Vuln-ID|V-220290

O121-C2-015100 - DBMS passwords must not be stored in compiled, encoded, or encrypted batch jobs or compiled, encoded, or encrypted application source code.

Rule-ID|SV-237734r961863_rule

STIG-ID|O121-C2-015100

STIG-Legacy|SV-76227

STIG-Legacy|V-61737

Vuln-ID|V-237734

O121-C2-016600 - The DBMS must implement required cryptographic protections using cryptographic modules complying with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-237739r961050_rule

STIG-ID|O121-C2-016600

STIG-Legacy|SV-76249

STIG-Legacy|V-61759

Vuln-ID|V-237739

O121-C2-019100 - The DBMS must protect against or limit the effects of organization-defined types of Denial of Service (DoS) attacks.

800-53|SC-5

CCI|CCI-002385

Rule-ID|SV-237742r960735_rule

STIG-ID|O121-C2-019100

STIG-Legacy|SV-76273

STIG-Legacy|V-61783

Vuln-ID|V-237742

O121-N1-015602 - When using command-line tools such as Oracle SQL*Plus, which can accept a plain-text password, users must use an alternative logon method that does not expose the password.

Rule-ID|SV-220304r961047_rule

STIG-ID|O121-N1-015602

STIG-Legacy|SV-76335

STIG-Legacy|V-61845

Vuln-ID|V-220304

O121-OS-011200 - The OS must limit privileges to change the DBMS software resident within software libraries (including privileged programs).

Detections

Analytics

DISA Oracle Database 12c STIG v3r5 Unix

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous