Detections
Analytics
O121-C2-015501 - Oracle Database must map the PKI-authenticated identity to an associated user account - services, applications, etc. that connect to the DBMS independently of individual users, must use valid, current DoD approved PKI certificates for authentication to the DBMS.
Information
The DOD standard for authentication is DOD-approved PKI certificates. Once a PKI certificate has been validated, it must be mapped to a DBMS user account for the authenticated identity to be meaningful to the DBMS and useful for authorization decisions.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Configure the DBMS to map the authenticated identity directly to the DBMS user account.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_12c_V3R5_STIG.zip
Item Details
Audit Name: DISA Oracle Database 12c STIG v3r5 OracleDB
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(2)(c), CAT|II, CCI|CCI-000187, Rule-ID|SV-220293r1018571_rule, STIG-ID|O121-C2-015501, STIG-Legacy|SV-76235, STIG-Legacy|V-61745, Vuln-ID|V-220293
Plugin: OracleDB
Control ID: 10d8adacc2252933171f7c8deb1b1b79cfacca96b64c1daadc190e4cc9db0e3b