Detections
Analytics

1.73 O19C-00-015300

Information

Oracle Database must map the authenticated identity to the user account using public key infrastructure (PKI)-based authentication.

GROUP ID: V-270567
RULE ID: SV-270567r1064979

The DOD standard for authentication is DOD-approved PKI certificates. Once a PKI certificate has been validated, it must be mapped to a database management system (DBMS) user account for the authenticated identity to be meaningful to the DBMS and useful for authorization decisions.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the DBMS to map the authenticated identity directly to the DBMS user account.

See Also

https://workbench.cisecurity.org/benchmarks/26166

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(2), CAT|II, CCI|CCI-000187, Rule-ID|SV-270567r1064979_rule, STIG-ID|O19C-00-015300, Vuln-ID|V-270567

Plugin: OracleDB

Control ID: ed77479ff868a50ba3a02d403239922cf60ea8faab75b781118fa95bd37caef6