Detections
Analytics

4.1.19 Ensure 'EXECUTE' Is Revoked from 'PUBLIC' on 'UTL_DBWS'

Information

As use of the UTL_DBWS package could allow an unauthorized user to corrupt the HTTP stream used for carry the protocols that communicate with the instance's web-based external communications, use of this package should be restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE EXECUTE ON UTL_DBWS FROM 'PUBLIC';

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: 4813e90451b59159973ca6702e6e71717e5e175eb70c52b6cdd98d3109a3477e