DISA_STIG_Oracle_WebLogic_Server_12c_Linux_v2r2.audit from DISA Oracle WebLogic Server 12c v2r2 STIG

WBLC-01-000009 - Oracle WebLogic must utilize cryptography to protect the confidentiality of remote access management sessions - SSL Listen Port

800-53|AC-17(2)

CAT|II

CCI|CCI-000068

Rule-ID|SV-235928r960759_rule

STIG-ID|WBLC-01-000009

STIG-Legacy|SV-70459

STIG-Legacy|V-56205

Vuln-ID|V-235928

WBLC-01-000009 - Oracle WebLogic must utilize cryptography to protect the confidentiality of remote access management sessions - Unsecure Listen Port

WBLC-01-000010 - Oracle WebLogic must use cryptography to protect the integrity of the remote access session - SSL Listen Port

CCI|CCI-001453

Rule-ID|SV-235929r960762_rule

STIG-ID|WBLC-01-000010

STIG-Legacy|SV-70461

STIG-Legacy|V-56207

Vuln-ID|V-235929

WBLC-01-000010 - Oracle WebLogic must use cryptography to protect the integrity of the remote access session - Unsecure Listen Port

WBLC-01-000011 - Oracle WebLogic must employ automated mechanisms to facilitate the monitoring and control of remote access methods.

800-53|AC-17(1)

CCI|CCI-000067

Rule-ID|SV-235930r961863_rule

STIG-ID|WBLC-01-000011

STIG-Legacy|SV-70463

STIG-Legacy|V-56209

Vuln-ID|V-235930

WBLC-01-000013 - Oracle WebLogic must ensure remote sessions for accessing security functions and security-relevant information are audited.

Rule-ID|SV-235931r960765_rule

STIG-ID|WBLC-01-000013

STIG-Legacy|SV-70465

STIG-Legacy|V-56211

Vuln-ID|V-235931

WBLC-01-000014 - Oracle WebLogic must support the capability to disable network protocols deemed by the organization to be non-secure except for explicitly identified components in support of specific operational requirements.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-235932r1043177_rule

STIG-ID|WBLC-01-000014

STIG-Legacy|SV-70467

STIG-Legacy|V-56213

Vuln-ID|V-235932

WBLC-01-000018 - Oracle WebLogic must automatically audit account creation - Auditing Provider

800-53|AC-2(4)

CCI|CCI-000018

Rule-ID|SV-235933r961842_rule

STIG-ID|WBLC-01-000018

STIG-Legacy|SV-70469

STIG-Legacy|V-56215

Vuln-ID|V-235933

WBLC-01-000018 - Oracle WebLogic must automatically audit account creation - Configuration Audit Type

WBLC-01-000019 - Oracle WebLogic must automatically audit account modification - Auditing Provider

CCI|CCI-001403

Rule-ID|SV-235934r961842_rule

STIG-ID|WBLC-01-000019

STIG-Legacy|SV-70471

STIG-Legacy|V-56217

Vuln-ID|V-235934

WBLC-01-000019 - Oracle WebLogic must automatically audit account modification - Configuration Audit Type

WBLC-01-000030 - Oracle WebLogic must provide access logging that ensures users who are granted a privileged role (or roles) have their privileged activity logged.

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-235935r961827_rule

STIG-ID|WBLC-01-000030

STIG-Legacy|SV-70473

STIG-Legacy|V-56219

Vuln-ID|V-235935

WBLC-01-000032 - Oracle WebLogic must limit the number of failed login attempts to an organization-defined number of consecutive invalid attempts that occur within an organization-defined time period.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-235936r961863_rule

STIG-ID|WBLC-01-000032

STIG-Legacy|SV-70475

STIG-Legacy|V-56221

Vuln-ID|V-235936

WBLC-01-000033 - Oracle WebLogic must enforce the organization-defined time period during which the limit of consecutive invalid access attempts by a user is counted.

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-235937r961863_rule

STIG-ID|WBLC-01-000033

STIG-Legacy|SV-70477

STIG-Legacy|V-56223

Vuln-ID|V-235937

WBLC-01-000034 - Oracle WebLogic must automatically lock accounts when the maximum number of unsuccessful login attempts is exceeded for an organization-defined time period or until the account is unlocked by an administrator.

Rule-ID|SV-235938r961863_rule

STIG-ID|WBLC-01-000034

STIG-Legacy|SV-70479

STIG-Legacy|V-56225

Vuln-ID|V-235938

WBLC-02-000062 - Oracle WebLogic must protect against an individual falsely denying having performed a particular action.

800-53|AU-10

CCI|CCI-000166

Rule-ID|SV-235939r960864_rule

STIG-ID|WBLC-02-000062

STIG-Legacy|SV-70481

STIG-Legacy|V-56227

Vuln-ID|V-235939

WBLC-02-000065 - Oracle WebLogic must compile audit records from multiple components within the system into a system-wide (logical or physical) audit trail that is time-correlated to within an organization-defined level of tolerance.

800-53|AU-12(1)

CAT|III

CCI|CCI-000174

Rule-ID|SV-235940r960873_rule

STIG-ID|WBLC-02-000065

STIG-Legacy|SV-70483

STIG-Legacy|V-56229

Vuln-ID|V-235940

WBLC-02-000069 - Oracle WebLogic must generate audit records for the DoD-selected list of auditable events - HTTP Access Log

Rule-ID|SV-235941r960885_rule

STIG-ID|WBLC-02-000069

STIG-Legacy|SV-70485

STIG-Legacy|V-56231

Vuln-ID|V-235941

WBLC-02-000073 - Oracle WebLogic must produce process events and severity levels to establish what type of HTTPD-related events and severity levels occurred.

800-53|AU-3

CCI|CCI-000130

Rule-ID|SV-235942r960891_rule

STIG-ID|WBLC-02-000073

STIG-Legacy|SV-70487

STIG-Legacy|V-56233

Vuln-ID|V-235942

WBLC-02-000074 - Oracle WebLogic must produce audit records containing sufficient information to establish what type of JVM-related events and severity levels occurred.

Rule-ID|SV-235943r960891_rule

STIG-ID|WBLC-02-000074

STIG-Legacy|SV-70489

STIG-Legacy|V-56235

Vuln-ID|V-235943

WBLC-02-000075 - Oracle WebLogic must produce process events and security levels to establish what type of Oracle WebLogic process events and severity levels occurred.

Rule-ID|SV-235944r960891_rule

STIG-ID|WBLC-02-000075

STIG-Legacy|SV-70491

STIG-Legacy|V-56237

Vuln-ID|V-235944

WBLC-02-000076 - Oracle WebLogic must produce audit records containing sufficient information to establish when (date and time) the events occurred.

CCI|CCI-000131

Rule-ID|SV-235945r960894_rule

STIG-ID|WBLC-02-000076

STIG-Legacy|SV-70493

STIG-Legacy|V-56239

Vuln-ID|V-235945

WBLC-02-000077 - Oracle WebLogic must produce audit records containing sufficient information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-235946r960897_rule

STIG-ID|WBLC-02-000077

STIG-Legacy|SV-70495

STIG-Legacy|V-56241

Vuln-ID|V-235946

WBLC-02-000078 - Oracle WebLogic must produce audit records containing sufficient information to establish the sources of the events.

CCI|CCI-000133

Rule-ID|SV-235947r960900_rule

STIG-ID|WBLC-02-000078

STIG-Legacy|SV-70497

STIG-Legacy|V-56243

Vuln-ID|V-235947

WBLC-02-000079 - Oracle WebLogic must produce audit records that contain sufficient information to establish the outcome (success or failure) of application server and application events.

CCI|CCI-000134

Rule-ID|SV-235948r960903_rule

STIG-ID|WBLC-02-000079

STIG-Legacy|SV-70499

STIG-Legacy|V-56245

Vuln-ID|V-235948

WBLC-02-000080 - Oracle WebLogic must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event.

CCI|CCI-001487

Rule-ID|SV-235949r960906_rule

STIG-ID|WBLC-02-000080

STIG-Legacy|SV-70501

STIG-Legacy|V-56247

Vuln-ID|V-235949

WBLC-02-000081 - Oracle WebLogic must provide the ability to write specified audit record content to an audit log server.

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-235950r961860_rule

STIG-ID|WBLC-02-000081

STIG-Legacy|SV-70503

STIG-Legacy|V-56249

Vuln-ID|V-235950

WBLC-02-000083 - Oracle WebLogic must provide a real-time alert when organization-defined audit failure events occur - Module-HealthState

800-53|AU-5a.

CCI|CCI-000139

Rule-ID|SV-235951r960912_rule

STIG-ID|WBLC-02-000083

STIG-Legacy|SV-70505

STIG-Legacy|V-56251

Vuln-ID|V-235951

WBLC-02-000083 - Oracle WebLogic must provide a real-time alert when organization-defined audit failure events occur - SMTP Notification

WBLC-02-000084 - Oracle WebLogic must alert designated individual organizational officials in the event of an audit processing failure - Module-HealthState

Rule-ID|SV-235952r960912_rule

STIG-ID|WBLC-02-000084

STIG-Legacy|SV-70507

STIG-Legacy|V-56253

Vuln-ID|V-235952

WBLC-02-000084 - Oracle WebLogic must alert designated individual organizational officials in the event of an audit processing failure - SMTP Notification

WBLC-02-000086 - Oracle WebLogic must notify administrative personnel as a group in the event of audit processing failure - Module-HealthState

800-53|AU-5b.

CCI|CCI-000140

Rule-ID|SV-235953r960912_rule

STIG-ID|WBLC-02-000086

STIG-Legacy|SV-70509

STIG-Legacy|V-56255

Vuln-ID|V-235953

WBLC-02-000086 - Oracle WebLogic must notify administrative personnel as a group in the event of audit processing failure - SMTP Notification

WBLC-02-000093 - Oracle WebLogic must use internal system clocks to generate time stamps for audit records.

800-53|AU-8a.

Detections

Analytics

Oracle WebLogic Server 12c Linux v2r2

Audit Details

File Details

Audit Changelog

No revisions found