4.2.13 Ensure 'EXECUTE' Is Revoked from 'PUBLIC' on 'DBMS_IJOB'

Information

As use of the DBMS_IJOB package could allow an attacker to change identities by using a different username to execute a database job.

Solution

To remediate this setting execute the following SQL statement. REVOKE EXECUTE ON DBMS_IJOB FROM PUBLIC;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Audit Name: CIS Oracle Server 11g R2 DB v2.2.0

Plugin: OracleDB

Control ID: 594d099c580e51c92e8bc54614bbafe140b7b5582f258c9a8057d04df05dc8ec