Detections
Analytics

4.3.48 Restrict Access to SYSIBM.SYSBUFFERPOOLAUTH

Information

The SYSIBM.SYSBUFFERPOOLAUTH table contains the bufferpool privileges granted to the user, group or role of a user. It is recommended that the PUBLIC role be restricted from accessing this table.

This table contains the bufferpool privileges granted to a user, group or roles of a user, and may be used as an attack vector.

Solution

Revoke access from PUBLIC.

 - Connect to the Db2 database. db2 => connect to <dbname>
 - Run the following command: db2 => REVOKE SELECT ON SYSIBM.SYSBUFFERPOOLAUTH FROM PUBLIC

See Also

https://workbench.cisecurity.org/benchmarks/23492

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: IBM_DB2DB

Control ID: bc465967aa186f5af8d5930b95bace992197464462554b1983da035292efd723