DISA_Oracle_Database_19c_STIG_v1r2__Unix.audit from DISA Oracle Database 19c STIG v1r2

O19C-00-000200 - Oracle Database must protect against or limit the effects of organization-defined types of denial-of-service (DoS) attacks.

CAT|II

CCI|CCI-000054

Rule-ID|SV-270496r1064766_rule

STIG-ID|O19C-00-000200

Vuln-ID|V-270496

O19C-00-006000 - Oracle Database must provide an immediate real-time alert to appropriate support staff of all audit log failures.

CCI|CCI-001858

Rule-ID|SV-270509r1065202_rule

STIG-ID|O19C-00-006000

Vuln-ID|V-270509

O19C-00-007300 - Oracle Database must support enforcement of logical access restrictions associated with changes to the database management system (DBMS) configuration and to the database itself.

CCI|CCI-001813

Rule-ID|SV-270512r1065305_rule

STIG-ID|O19C-00-007300

Vuln-ID|V-270512

O19C-00-009900 - The Oracle Listener must be configured to require administration authentication.

CAT|I

CCI|CCI-000366

Rule-ID|SV-270531r1065272_rule

STIG-ID|O19C-00-009900

Vuln-ID|V-270531

O19C-00-011200 - Network access to Oracle Database must be restricted to authorized personnel.

Rule-ID|SV-270539r1064895_rule

STIG-ID|O19C-00-011200

Vuln-ID|V-270539

O19C-00-011500 - The /diag subdirectory under the directory assigned to the DIAGNOSTIC_DEST parameter must be protected from unauthorized access.

Rule-ID|SV-270541r1065276_rule

STIG-ID|O19C-00-011500

Vuln-ID|V-270541

O19C-00-011600 - Remote administration must be disabled for the Oracle connection manager.

Rule-ID|SV-270542r1064904_rule

STIG-ID|O19C-00-011600

Vuln-ID|V-270542

O19C-00-011700 - Network client connections must be restricted to supported versions.

Rule-ID|SV-270543r1064907_rule

STIG-ID|O19C-00-011700

Vuln-ID|V-270543

O19C-00-011800 - Database administrator (DBA) OS accounts must be granted only those host system privileges necessary for the administration of the Oracle Database.

Rule-ID|SV-270544r1065278_rule

STIG-ID|O19C-00-011800

Vuln-ID|V-270544

O19C-00-013200 - OS accounts used to run external procedures called by Oracle Database must have limited privileges.

CCI|CCI-000381

Rule-ID|SV-270555r1115550_rule

STIG-ID|O19C-00-013200

Vuln-ID|V-270555

O19C-00-013400 - Access to external executables must be disabled or restricted.

Rule-ID|SV-270557r1065281_rule

STIG-ID|O19C-00-013400

Vuln-ID|V-270557

O19C-00-014900 - If passwords are used for authentication, the Oracle Database must transmit only encrypted representations of passwords.

CCI|CCI-000197

Rule-ID|SV-270565r1064973_rule

STIG-ID|O19C-00-014900

Vuln-ID|V-270565

O19C-00-015200 - Oracle Database, when using public key infrastructure (PKI)-based authentication, must enforce authorized access to the corresponding private key.

CCI|CCI-000186

Rule-ID|SV-270566r1064976_rule

STIG-ID|O19C-00-015200

Vuln-ID|V-270566

O19C-00-015500 - Oracle Database must use NIST-validated FIPS 140-2/140-3 compliant cryptography for authentication mechanisms.

CCI|CCI-000803

Rule-ID|SV-270569r1065205_rule

STIG-ID|O19C-00-015500

Vuln-ID|V-270569

O19C-00-017700 - Oracle Database must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures.

CCI|CCI-002420

Rule-ID|SV-270579r1065015_rule

STIG-ID|O19C-00-017700

Vuln-ID|V-270579

O19C-00-020400 - Oracle Database must include only approved trust anchors in trust stores or certificate stores managed by the organization.

Detections

Analytics

DISA Oracle Database 19c STIG v1r2 Unix

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous