DISA_STIG_Oracle_WebLogic_Server_12c_Windows_v2r1.audit for DISA Oracle WebLogic Server 12c

WBLC-01-000009 - Oracle WebLogic must utilize cryptography to protect the confidentiality of remote access management sessions - SSL Listen Port

800-53|AC-17(2)

CAT|II

CCI|CCI-000068

Rule-ID|SV-235928r628562_rule

STIG-ID|WBLC-01-000009

STIG-Legacy|SV-70459

STIG-Legacy|V-56205

Vuln-ID|V-235928

WBLC-01-000009 - Oracle WebLogic must utilize cryptography to protect the confidentiality of remote access management sessions - Unsecure Listen Port

WBLC-01-000010 - Oracle WebLogic must use cryptography to protect the integrity of the remote access session - SSL Listen Port

CCI|CCI-001453

Rule-ID|SV-235929r628565_rule

STIG-ID|WBLC-01-000010

STIG-Legacy|SV-70461

STIG-Legacy|V-56207

Vuln-ID|V-235929

WBLC-01-000010 - Oracle WebLogic must use cryptography to protect the integrity of the remote access session - Unsecure Listen Port

WBLC-01-000011 - Oracle WebLogic must employ automated mechanisms to facilitate the monitoring and control of remote access methods.

800-53|AC-17(1)

CCI|CCI-000067

Rule-ID|SV-235930r628568_rule

STIG-ID|WBLC-01-000011

STIG-Legacy|SV-70463

STIG-Legacy|V-56209

Vuln-ID|V-235930

WBLC-01-000013 - Oracle WebLogic must ensure remote sessions for accessing security functions and security-relevant information are audited.

Rule-ID|SV-235931r628571_rule

STIG-ID|WBLC-01-000013

STIG-Legacy|SV-70465

STIG-Legacy|V-56211

Vuln-ID|V-235931

WBLC-01-000014 - Oracle WebLogic must support the capability to disable network protocols deemed by the organization to be non-secure except for explicitly identified components in support of specific operational requirements.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-235932r672375_rule

STIG-ID|WBLC-01-000014

STIG-Legacy|SV-70467

STIG-Legacy|V-56213

Vuln-ID|V-235932

WBLC-01-000018 - Oracle WebLogic must automatically audit account creation - Auditing Provider

800-53|AC-2(4)

CCI|CCI-000018

Rule-ID|SV-235933r628577_rule

STIG-ID|WBLC-01-000018

STIG-Legacy|SV-70469

STIG-Legacy|V-56215

Vuln-ID|V-235933

WBLC-01-000018 - Oracle WebLogic must automatically audit account creation - Configuration Audit Type

WBLC-01-000019 - Oracle WebLogic must automatically audit account modification - Auditing Provider

CCI|CCI-001403

Rule-ID|SV-235934r628580_rule

STIG-ID|WBLC-01-000019

STIG-Legacy|SV-70471

STIG-Legacy|V-56217

Vuln-ID|V-235934

WBLC-01-000019 - Oracle WebLogic must automatically audit account modification - Configuration Audit Type

WBLC-01-000030 - Oracle WebLogic must provide access logging that ensures users who are granted a privileged role (or roles) have their privileged activity logged.

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-235935r628583_rule

STIG-ID|WBLC-01-000030

STIG-Legacy|SV-70473

STIG-Legacy|V-56219

Vuln-ID|V-235935

WBLC-01-000032 - Oracle WebLogic must limit the number of failed login attempts to an organization-defined number of consecutive invalid attempts that occur within an organization-defined time period.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-235936r628586_rule

STIG-ID|WBLC-01-000032

STIG-Legacy|SV-70475

STIG-Legacy|V-56221

Vuln-ID|V-235936

WBLC-01-000033 - Oracle WebLogic must enforce the organization-defined time period during which the limit of consecutive invalid access attempts by a user is counted.

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-235937r628589_rule

STIG-ID|WBLC-01-000033

STIG-Legacy|SV-70477

STIG-Legacy|V-56223

Vuln-ID|V-235937

WBLC-01-000034 - Oracle WebLogic must automatically lock accounts when the maximum number of unsuccessful login attempts is exceeded for an organization-defined time period or until the account is unlocked by an administrator.

Rule-ID|SV-235938r628592_rule

STIG-ID|WBLC-01-000034

STIG-Legacy|SV-70479

STIG-Legacy|V-56225

Vuln-ID|V-235938

WBLC-02-000062 - Oracle WebLogic must protect against an individual falsely denying having performed a particular action.

800-53|AU-10

CCI|CCI-000166

Rule-ID|SV-235939r628595_rule

STIG-ID|WBLC-02-000062

STIG-Legacy|SV-70481

STIG-Legacy|V-56227

Vuln-ID|V-235939

WBLC-02-000065 - Oracle WebLogic must compile audit records from multiple components within the system into a system-wide (logical or physical) audit trail that is time-correlated to within an organization-defined level of tolerance.

800-53|AU-12(1)

CAT|III

CCI|CCI-000174

Rule-ID|SV-235940r628598_rule

STIG-ID|WBLC-02-000065

STIG-Legacy|SV-70483

STIG-Legacy|V-56229

Vuln-ID|V-235940

WBLC-02-000069 - Oracle WebLogic must generate audit records for the DoD-selected list of auditable events.

Rule-ID|SV-235941r628601_rule

STIG-ID|WBLC-02-000069

STIG-Legacy|SV-70485

STIG-Legacy|V-56231

Vuln-ID|V-235941

WBLC-02-000073 - Oracle WebLogic must produce process events and severity levels to establish what type of HTTPD-related events and severity levels occurred.

800-53|AU-3

CCI|CCI-000130

Rule-ID|SV-235942r628604_rule

STIG-ID|WBLC-02-000073

STIG-Legacy|SV-70487

STIG-Legacy|V-56233

Vuln-ID|V-235942

WBLC-02-000074 - Oracle WebLogic must produce audit records containing sufficient information to establish what type of JVM-related events and severity levels occurred.

Rule-ID|SV-235943r628607_rule

STIG-ID|WBLC-02-000074

STIG-Legacy|SV-70489

STIG-Legacy|V-56235

Vuln-ID|V-235943

WBLC-02-000075 - Oracle WebLogic must produce process events and security levels to establish what type of Oracle WebLogic process events and severity levels occurred.

Rule-ID|SV-235944r628610_rule

STIG-ID|WBLC-02-000075

STIG-Legacy|SV-70491

STIG-Legacy|V-56237

Vuln-ID|V-235944

WBLC-02-000076 - Oracle WebLogic must produce audit records containing sufficient information to establish when (date and time) the events occurred.

CCI|CCI-000131

Rule-ID|SV-235945r628613_rule

STIG-ID|WBLC-02-000076

STIG-Legacy|SV-70493

STIG-Legacy|V-56239

Vuln-ID|V-235945

WBLC-02-000077 - Oracle WebLogic must produce audit records containing sufficient information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-235946r628616_rule

STIG-ID|WBLC-02-000077

STIG-Legacy|SV-70495

STIG-Legacy|V-56241

Vuln-ID|V-235946

WBLC-02-000078 - Oracle WebLogic must produce audit records containing sufficient information to establish the sources of the events.

CCI|CCI-000133

Rule-ID|SV-235947r628619_rule

STIG-ID|WBLC-02-000078

STIG-Legacy|SV-70497

STIG-Legacy|V-56243

Vuln-ID|V-235947

WBLC-02-000079 - Oracle WebLogic must produce audit records that contain sufficient information to establish the outcome (success or failure) of application server and application events.

CCI|CCI-000134

Rule-ID|SV-235948r628622_rule

STIG-ID|WBLC-02-000079

STIG-Legacy|SV-70499

STIG-Legacy|V-56245

Vuln-ID|V-235948

WBLC-02-000080 - Oracle WebLogic must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event.

CCI|CCI-001487

Rule-ID|SV-235949r628625_rule

STIG-ID|WBLC-02-000080

STIG-Legacy|SV-70501

STIG-Legacy|V-56247

Vuln-ID|V-235949

WBLC-02-000081 - Oracle WebLogic must provide the ability to write specified audit record content to an audit log server.

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-235950r628628_rule

STIG-ID|WBLC-02-000081

STIG-Legacy|SV-70503

STIG-Legacy|V-56249

Vuln-ID|V-235950

WBLC-02-000083 - Oracle WebLogic must provide a real-time alert when organization-defined audit failure events occur - Module-HealthState

800-53|AU-5a.

CCI|CCI-000139

Rule-ID|SV-235951r628631_rule

STIG-ID|WBLC-02-000083

STIG-Legacy|SV-70505

STIG-Legacy|V-56251

Vuln-ID|V-235951

WBLC-02-000083 - Oracle WebLogic must provide a real-time alert when organization-defined audit failure events occur - SMTP Notification

WBLC-02-000084 - Oracle WebLogic must alert designated individual organizational officials in the event of an audit processing failure - Module-HealthState

Rule-ID|SV-235952r628634_rule

STIG-ID|WBLC-02-000084

STIG-Legacy|SV-70507

STIG-Legacy|V-56253

Vuln-ID|V-235952

WBLC-02-000084 - Oracle WebLogic must alert designated individual organizational officials in the event of an audit processing failure - SMTP Notification

WBLC-02-000086 - Oracle WebLogic must notify administrative personnel as a group in the event of audit processing failure - Module-HealthState

800-53|AU-5b.

CCI|CCI-000140

Rule-ID|SV-235953r628637_rule

STIG-ID|WBLC-02-000086

STIG-Legacy|SV-70509

STIG-Legacy|V-56255

Vuln-ID|V-235953

WBLC-02-000086 - Oracle WebLogic must notify administrative personnel as a group in the event of audit processing failure - SMTP Notification

WBLC-02-000093 - Oracle WebLogic must use internal system clocks to generate time stamps for audit records.

800-53|AU-8a.

Detections

Analytics

Oracle WebLogic Server 12c Windows v2r1

Audit Details

File Details

Audit Changelog

Revision 1.5

Miscellaneous

Added

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.5 Apr 12, 2023 Miscellaneous Metadata updated. Platform check updated. Added DISA_STIG_Oracle_WebLogic_Server_12c_Windows_v2r1.audit for DISA Oracle WebLogic Server 12c
Revision 1.4 Mar 7, 2023 Miscellaneous Metadata updated. References updated. Variables updated.
Revision 1.3 Dec 7, 2022 Miscellaneous Metadata updated.
Revision 1.2 Apr 25, 2022 Miscellaneous References updated.
Revision 1.1 Feb 28, 2022 Miscellaneous Metadata updated.

Detections

Analytics

Oracle WebLogic Server 12c Windows v2r1 Download File

Audit Details

File Details

Audit Changelog

Revision 1.5

Miscellaneous

Added

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Oracle WebLogic Server 12c Windows v2r1