Detections
Analytics

4.4.1 Ensure 'DELETE_CATALOG_ROLE' Is Revoked from Unauthorized 'GRANTEE'

Information

As permitting unauthorized access to the DELETE_CATALOG_ROLE can allow the destruction of audit records vital to the forensic investigation of unauthorized activities, this capability should be restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE DELETE_CATALOG_ROLE FROM <grantee>;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: d454f733b0367f6810b8d78d056f4e99f408301d885728cb38b1cea52c4c78e5