Detections
Analytics

4.1.20 Ensure 'EXECUTE' Is Revoked from 'PUBLIC' on 'UTL_ORAMTS'

Information

As use of the UTL_ORAMTS package could be used to send (sensitive) information to external websites. The use of this package should be restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE EXECUTE ON UTL_ORAMTS FROM PUBLIC;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: e11b64ccb7555397140a6d7c3e483672e0b05cc473b17858be331c09fa4a9407