Detections
Analytics

4.3.10 Ensure 'GRANT ANY OBJECT PRIVILEGE' Is Revoked from Unauthorized 'GRANTEE'

Information

As authorization to use the GRANT ANY OBJECT PRIVILEGE capability can allow an unauthorized user to potentially access/change confidential data or damage the data catalog due to potential complete instance access, this capability should be restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE GRANT ANY OBJECT PRIVILEGE FROM <grantee>;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: 9be70a7223836a3953c8eb2da455291ce9ab4e28367eddb1f6136c90d44d098e