1.6 Verify That 'MYSQL_PWD' Is Not Set In Users' Profiles - .profile

Information

MySQL can read a default database password from an environment variable called MYSQL_PWD.

Rationale:

The use of the MYSQL_PWD environment variable implies the clear text storage of MySQL credentials. Avoiding this may increase assurance that the confidentiality of MySQL credentials is preserved.

Solution

Check which users and/or scripts are setting MYSQL_PWD and change them to use a more secure method.

Default Value:

Not set.

See Also

https://workbench.cisecurity.org/files/3859

Item Details

Category: IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|IA-5(1), 800-53|SC-28, 800-53|SC-28(1), CSCv7|16.4

Plugin: Unix

Control ID: f91c0b7ae904d27110b4865b6458b03b91d1fa3b43dff0c2f2f471eefa6ecd16