Detections
Analytics
OH12-1X-000180 - The ListenAddress property of the Node Manager configured to support OHS must match the CN of the certificate used by Node Manager.
Information
Oracle Node Manager is the utility that is used to perform common operational tasks for OHS.For connections to be made to the Node Manager, it must listen on an assigned address. When this parameter is not set, the Node Manager will listen on all available addresses on the server. This may lead to the Node Manager listening on networks, i.e., public network space, where Node Manager may become susceptible to attack instead of being limited to listening for connections on a controlled and secure management network. It is also important that the address specified matches the CN of the Node Manager.
Solution
1. Open $DOMAIN_HOME/nodemanager/nodemanager.properties with an editor.2. Search for the 'ListenAddress' property.
3. Set the 'ListenAddress' property to the CN of the Node Manager certificate, add the property if it does not exist.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_HTTP_Server_12-1-3_V2R3_STIG.zip
Item Details
Audit Name: DISA STIG Oracle HTTP Server 12.1.3 v2r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-221419r961863_rule, STIG-ID|OH12-1X-000180, STIG-Legacy|SV-79089, STIG-Legacy|V-64599, Vuln-ID|V-221419
Plugin: Unix
Control ID: d1768f6136bcc0e07ed950f9eda16b23b6b5f9b1a1b4835e6bff4975e3c67b69