Detections
Analytics

4.3.2 Ensure 'SELECT ANY TABLE' Is Revoked from Unauthorized 'GRANTEE'

Information

As assignment of the SELECT ANY TABLE privilege can allow the unauthorized viewing of sensitive data, this capability should be restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE SELECT ANY TABLE FROM <grantee>;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: 8ab249b0c4a2d58af2cba44287032579caa405251cd267d32b910bc80e5ba0b2