Detections
Analytics
MD8X-00-007600 - MongoDB must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.
Information
Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Disable each prohibited network function, port, protocol, or service prohibited by the PPSM guidance.More information for MongoDB port management can be found at the following link:
https://www.mongodb.com/docs/manual/reference/default-mongodb-port/
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MDB_Enterprise_Advanced_8-x_V1R1_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7(1)(b), CAT|II, CCI|CCI-001762, Rule-ID|SV-279382r1179313_rule, STIG-ID|MD8X-00-007600, Vuln-ID|V-279382
Plugin: MongoDB
Control ID: 0a5b879aff138afd94f23b2a60fabc6505c69b523a1da4a3ec56b8b29f10eed5