Detections
Analytics

1.45 O19C-00-011200

Information

Network access to Oracle Database must be restricted to authorized personnel.

GROUP ID: V-270539
RULE ID: SV-270539r1064895

Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users.

Solution

Configure the database listener to restrict access by IP address or set up an external device to restrict network access to the DBMS.

More information can be found at https://docs.oracle.com/en/database/oracle/oracle-database/19/netrf/parameters-for-the-sqlnet.ora.html#GUID-5C3AB641-7541-4CE9-BC9E-BA5DD30616A8.

See Also

https://workbench.cisecurity.org/benchmarks/26166

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-270539r1064895_rule, STIG-ID|O19C-00-011200, Vuln-ID|V-270539

Plugin: Unix

Control ID: b13a9eece36afa65a776967135b51bc8ee864953c8148ed0bad1cc936122f00e