Detections
Analytics

1.48 O19C-00-011600

Information

Remote administration must be disabled for the Oracle connection manager.

GROUP ID: V-270542
RULE ID: SV-270542r1064904

Remote administration provides a potential opportunity for malicious users to make unauthorized changes to the Connection Manager configuration or interrupt its service.

Solution

View the cman.ora file in the ORACLE_HOME/network/admin directory of the Connection Manager.

Include the following line in the file:

REMOTE_ADMIN = NO

See Also

https://workbench.cisecurity.org/benchmarks/26166

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-270542r1064904_rule, STIG-ID|O19C-00-011600, Vuln-ID|V-270542

Plugin: Unix

Control ID: f0114c9fdcae5f2264e05374a738e3a258e3ed1a4c246ac34a24cca43929434a