Detections
Analytics

4.6 Ensure '%ANY%' Is Revoked from Unauthorized 'GRANTEE'

Information

As authorization to use the ANY expansion of a privilege can allow an unauthorized user to potentially change confidential data or damage the data catalog, this capability should be restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE '<ANY Privilege>' FROM <grantee>;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: 21f9a070758e67716b0c61210633ce1678e6e78ab48c58f082fa8ceba60020bb