Detections
Analytics

4.3.7 Ensure 'ALTER SYSTEM' Is Revoked from Unauthorized 'GRANTEE'

Information

As assignment of the ALTER SYSTEM privilege can lead to severe problems, such as the instance's session being killed or the stopping of redo log recording, which would make transactions unrecoverable, this capability should be severely restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE ALTER SYSTEM FROM <grantee>;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: d02eb1071b96e4e799b23fae234441619a156200453a6b6eb7546e67575751d9