Detections
Analytics

6.3.1 Ensure 'ALL' Is Revoked On 'Sensitive' Tables

Information

Some tables contain critical information such as password hashes, encrypted passwords, etc. No user other than SYS should have table privileges on these tables.

Unauthorized users with access to these tables can perform actions at the operating system level that bypass normal security controls, potentially leading to data breaches, tampering, or destruction.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

To remediate this recommendation, revoke privileges that are no longer required by executing the following SQL statement.

REVOKE <privilege> ON <table> <directory_name>;

See Also

https://workbench.cisecurity.org/benchmarks/23897

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: OracleDB

Control ID: 4f0ee564e6dca2ffdb7d39146c4ba21f7137d9151301a4e52d6a424f1e40ca52