1.1 Ensure the appropriate MongoDB software version/patches are installed

Information

The MongoDB installation version, along with the patch level, should be the most recent that is compatible with the organization's operational needs. In addition, regularly view latest minor security patch updates for security vulnerability fixes (CVE Related) from MongoDB website: https://www.mongodb.com/alerts

Rationale:

Using the most recent MongoDB software version along with all applicable patches, helps limit the possibilities for vulnerabilities in the software. The installation version and/or patches applied should be selected according to the needs of the organization. At a minimum, the software version should be supported.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Upgrade to the latest version of the MongoDB software:

Backup the data set.

Download the binaries for the latest MongoDB revision from the MongoDB Download Page and store the binaries in a temporary location. The binaries download as compressed files that extract to the directory structure used by the MongoDB installation.

Shutdown the MongoDB instance.

Replace the existing MongoDB binaries with the downloaded binaries.

Restart the MongoDB instance.

Default Value:

Patches are not installed by default.

See Also

https://workbench.cisecurity.org/files/3773

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(2), 800-53|CM-8(3), 800-53|CM-10, 800-53|CM-11, CSCv7|2.2

Plugin: MongoDB

Control ID: 0a9f9b6706dca4ba710a18e7ad2c986b8d4f02c134e0e36441149cc19d7b9d1e