Detections
Analytics

DG0159-ORACLE11 - Remote administrative access to the database should be monitored by the IAO or IAM.

Information

Remote administrative access to systems provides a path for access to and exploit of DBA privileges. Where the risk has been accepted to allow remote administrative access, it is imperative to instate increased monitoring of this access to detect any abuse or compromise.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Develop, document and implement policy and procedures to monitor remote administrative access to the DBMS.

The automated generation of a log report with automatic dissemination to the IAO/IAM may be used.

Require and store an acknowledgement of receipt and confirmation of review for the log report.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11g_Y21M10_STIG.zip

Item Details

References: CAT|II, Rule-ID|SV-24810r1_rule, STIG-ID|DG0159-ORACLE11, Vuln-ID|V-15118

Plugin: Unix

Control ID: a451a3dc135e0aa30be20537dd1908d496d1fff9e094de759e84f8a0fd1f256f