Detections
Analytics

4.2.50 Restrict Access to SYSCAT.BUFFERPOOLAUTH

Information

The SYSCAT.BUFFERPOOLAUTH view contains the bufferpool privileges granted to the user, group or role of a user. It is recommended that the PUBLIC role be restricted from accessing this view.

This view contains the bufferpool privileges granted to a user, group or roles of a user, and may be used as an attack vector.

Solution

Revoke access from PUBLIC.

 - Connect to the Db2 database. db2 => connect to <dbname>
 - Run the following command: db2 => REVOKE SELECT ON SYSCAT.BUFFERPOOLAUTH FROM PUBLIC

See Also

https://workbench.cisecurity.org/benchmarks/23492

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: IBM_DB2DB

Control ID: 51aadcd960680000b96e3ec4731bf8040e4b61107c1f0992a9d27a28f7e44aeb