Detections
Analytics

4.3.5 Ensure 'BECOME USER' Is Revoked from Unauthorized 'GRANTEE'

Information

As assignment of the BECOME USER privilege can allow the unauthorized use of another user's privileges, this capability should be restricted according to the needs of the organization.

Solution

To remediate this setting execute the following SQL statement. REVOKE BECOME USER FROM <grantee>;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Plugin: OracleDB

Control ID: c3d300746421c0488f18e1f6f6defbddbf6bd6030e22c0b6a6af51c6aa760f43