MADB-10-012600 - MariaDB products must be an enterprise version supported by the vendor.

Information

Unsupported commercial and database systems should not be used, because fixes to newly identified bugs will not be implemented by the vendor. The lack of support can result in potential vulnerabilities.Systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities, which leaves them subject to exploitation.

When maintenance updates and patches are no longer available, the database software is no longer considered supported and should be upgraded or decommissioned.

Only Enterprise editions of MariaDB are supported. The Community edition is unsupported. MariaDB Enterprise is the only way to guarantee no malicious or unsupported code has been introduced to systems.

Note: The only way to access MariaDB Enterprise server is to have an active MariaDB Enterprise subscription and login. If access is needed, email [email protected] for assistance.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Remove or decommission all unsupported software products.

Upgrade unsupported DBMS or unsupported components to a supported version of the product.

Item Details

Audit Name: DISA MariaDB Enterprise 10.x STIG v2r5 MySQLDB

Category: SYSTEM AND SERVICES ACQUISITION

Plugin: MySQLDB

Control ID: 68376496eaccb1bc04c7c169726259101b7079c66f4c08f6d629820ad22652be

Detections

Analytics

MADB-10-012600 - MariaDB products must be an enterprise version supported by the vendor.

Information

Solution

See Also

Item Details