Detections
Analytics

6.5.1 Ensure 'DBA_COL_PRIVS' Is Revoked From Unauthorized 'GRANTEE'

Information

The DBA_COL_PRIVS view provides DBAs a view to manage all column level privileges granted to users and roles.

Granting DBA_COL_PRIVS privileges to unauthorized users increases the risk of data breaches, unauthorized modifications, and privilege escalation attacks. Access to this should be limited to authorized DBAs.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

To remediate this recommendation, execute the following SQL statement.

REVOKE UPDATE ON <TABLE> FROM <GRANTEE>;

See Also

https://workbench.cisecurity.org/benchmarks/23897

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: OracleDB

Control ID: fd4642940b1813feec3b8b5fe234c73c80bf8a9e77ae3060305e0692facece9a