O112-C2-016100 - The DBMS must employ strong identification and authentication techniques when establishing non-local maintenance and diagnostic sessions.

Information

Non-local maintenance and diagnostic activities are those activities conducted by individuals communicating through a network, either an external network (e.g., the Internet) or an internal network.

The act of managing systems and applications includes the ability to access sensitive application information, such as system configuration details, diagnostic information, user information, and potentially sensitive application data.

When applications provide a remote management capability inherent to the application, the application needs to ensure the identification and authentication techniques used to remotely access the system are strong enough to protect the system. If the communication channel is not adequately protected, authentication information, application data, and configuration information could be compromised.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure DBMS settings to use strong identification and authentication techniques for non-local maintenance and diagnostic sessions.

Item Details

Audit Name: DISA STIG Oracle 11.2g v2r5 Database

Category: CONFIGURATION MANAGEMENT

Plugin: OracleDB

Control ID: 93743c32c879f859b2d721ec80873f920dafad4dc705cf804318b76fa3cf4e60

Detections

Analytics

O112-C2-016100 - The DBMS must employ strong identification and authentication techniques when establishing non-local maintenance and diagnostic sessions.

Information

Solution

See Also

Item Details