Detections
Analytics

4.2 Ensure Example or Test Databases are Not Installed on Production Servers

Information

The default MySQL installation does not contain any example or test databases. However, it is a good idea to review for common example databases and ensure they have been removed from production systems.

Dropping example databases will reduce the attack surface of the MySQL server.

Solution

Execute the following SQL statement to drop an example database:

DROP DATABASE <database name>;

See Also

https://workbench.cisecurity.org/benchmarks/22687

Item Details

Category: PLANNING, SYSTEM AND SERVICES ACQUISITION

References: 800-53|PL-8, 800-53|SA-8

Plugin: MySQLDB

Control ID: 16aff074db87c55636305c20482bc4315c6845d045bd32776df0c82a657840f7