Detections
Analytics

4.3.4 Ensure 'EXEMPT ACCESS POLICY' Is Revoked from Unauthorized 'GRANTEE'

Information

As assignment of the EXEMPT ACCESS POLICY privilege can allow an unauthorized user to potentially access/change confidential data, this capability should be restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE EXEMPT ACCESS POLICY FROM <grantee>;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: 191e06178143a8c8299e1843092a3ee5e04ab715da5d9180539e379826c8483e