Detections
Analytics

4.1.21 Ensure 'EXECUTE' Is Revoked from 'PUBLIC' on 'UTL_HTTP'

Information

As use of the UTL_HTTP package could be used to send (sensitive) information to external websites. The use of this package should be restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE EXECUTE ON UTL_HTTP FROM PUBLIC;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: 0decc5a962c2026a4007743e5e25e9e8102784a7756ca74288fa64fd58a2620c