Detections
Analytics

1.49 O19C-00-011700

Information

Network client connections must be restricted to supported versions.

GROUP ID: V-270543
RULE ID: SV-270543r1064907

Unsupported Oracle network client installations may introduce vulnerabilities to the database. Restriction to use of supported versions helps to protect the database and helps to enforce newer, more robust security controls.

Solution

Edit the SQLNET.ORA file to add or edit the entries:

SQLNET.ALLOWED_LOGON_VERSION_SERVER = 12
SQLNET.ALLOWED_LOGON_VERSION_CLIENT = 12

Set the value to 12 or higher.

Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are: 12 and 12a

Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are: 12 and 12a

For more information on sqlnet.ora parameters refer to the following document:

https://docs.oracle.com/en/database/oracle/oracle-database/19/netrf/parameters-for-the-sqlnet.ora.html

See Also

https://workbench.cisecurity.org/benchmarks/26166

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-270543r1064907_rule, STIG-ID|O19C-00-011700, Vuln-ID|V-270543

Plugin: Unix

Control ID: 0a1689bf0762795aef2e322a4334cc141d7bc8718d82ca6151eb98292c5325de