Item Search

NameAudit NamePluginCategory
1.2 Use Dedicated Least Privileged Account for MariaDB Daemon/ServiceCIS MariaDB 10.6 on Linux L1 v1.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

2.1.1 Backup Policy in PlaceCIS MySQL 5.6 Enterprise Windows OS L1 v2.0.0Windows

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L1 MySQL RDBMS on Linux UnixUnix

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS on Linux UnixUnix

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L1 MySQL RDBMS on Linux UnixUnix

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS MySQL 5.6 Enterprise Linux OS L1 v2.0.0Unix

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L1 MySQL RDBMS UnixUnix

CONTINGENCY PLANNING

2.3 Dedicate the Machine Running MySQLCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L1 MySQL RDBMS on Linux UnixUnix

SYSTEM AND COMMUNICATIONS PROTECTION

2.3 Dedicate the Machine Running MySQLCIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L1 MySQL RDBMS on Linux UnixUnix

SYSTEM AND COMMUNICATIONS PROTECTION

2.3 Dedicate the Machine Running MySQLCIS Oracle MySQL Community Server 9.7 v1.0.0 L1 MySQL RDBMS on Linux UnixUnix

SYSTEM AND COMMUNICATIONS PROTECTION

2.3 Dedicate the Machine Running MySQLCIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS on Linux UnixUnix

SYSTEM AND COMMUNICATIONS PROTECTION

2.13 Ensure Socket Peer-Credential Authentication is Used AppropriatelyCIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L2 MySQL RDBMS on Linux MySQLDBMySQLDB

ACCESS CONTROL

2.13 Ensure Socket Peer-Credential Authentication is Used AppropriatelyCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L2 MySQL RDBMS MySQLDBMySQLDB

CONFIGURATION MANAGEMENT

3.2 Ensure 'log_bin_basename' Files Have Appropriate PermissionsCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.2 Ensure 'log_bin_basename' Files Have Appropriate PermissionsCIS MySQL 5.7 Community Database L1 v2.0.0MySQLDB

ACCESS CONTROL, MEDIA PROTECTION

3.2.1 Ensure that encryption-at-rest is enabled for RDS instancesCIS Amazon Web Services Foundations v7.0.0 L1amazon_aws

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

3.5 Ensure 'relay_log_basename' Files Have Appropriate PermissionsCIS MySQL 5.7 Enterprise Windows OS L1 v2.0.0Windows

ACCESS CONTROL, MEDIA PROTECTION

3.5 Ensure 'relay_log_basename' Files Have Appropriate PermissionsCIS MySQL 5.7 Community Database L1 v2.0.0MySQLDB

ACCESS CONTROL, MEDIA PROTECTION

3.7 Ensure SSL Key Files Have Appropriate PermissionsCIS MySQL 5.6 Enterprise Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.7 Ensure SSL Key Files Have Appropriate PermissionsCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.8 Ensure Plugin Directory Has Appropriate PermissionsCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L1 MySQL RDBMS on Linux UnixUnix

ACCESS CONTROL, MEDIA PROTECTION

3.9 Secure MySQL Keyring - keyring_okv_pathCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.10 Secure MySQL Keyring - keyring_okv_pathCIS MySQL 5.7 Enterprise Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

4.2 Ensure Example or Test Databases are Not Installed on Production ServersCIS MySQL 5.6 Community Database L1 v2.0.0MySQLDB

PLANNING, SYSTEM AND SERVICES ACQUISITION

4.2 Ensure Example or Test Databases are Not Installed on Production ServersCIS MySQL 5.7 Enterprise Database L1 v2.0.0MySQLDB

PLANNING, SYSTEM AND SERVICES ACQUISITION

4.4 Harden Usage for 'local_infile' on MySQL ClientsCIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB

CONFIGURATION MANAGEMENT

4.6 Ensure Symbolic Links are DisabledCIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB

PLANNING, SYSTEM AND SERVICES ACQUISITION

4.6 Ensure Symbolic Links are DisabledCIS Oracle MySQL Community Server 9.7 v1.0.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB

PLANNING, SYSTEM AND SERVICES ACQUISITION

4.6 Ensure Symbolic Links are DisabledCIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB

PLANNING, SYSTEM AND SERVICES ACQUISITION

4.6 Ensure Symbolic Links are DisabledCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB

PLANNING, SYSTEM AND SERVICES ACQUISITION

4.6 Ensure Symbolic Links are DisabledCIS Oracle MySQL Community Server 9.7 v1.0.0 L1 MySQL RDBMS MySQLDBMySQLDB

PLANNING, SYSTEM AND SERVICES ACQUISITION

4.6 Ensure Symbolic Links are DisabledCIS MySQL 5.7 Enterprise Database L1 v2.0.0MySQLDB

PLANNING, SYSTEM AND SERVICES ACQUISITION

4.6 Ensure Symbolic Links are DisabledCIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS MySQLDBMySQLDB

PLANNING, SYSTEM AND SERVICES ACQUISITION

6.1 Ensure 'log_error' is configured correctlyCIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB

AUDIT AND ACCOUNTABILITY

6.1 Ensure 'log_error' is configured correctlyCIS MySQL 5.7 Community Database L1 v2.0.0MySQLDB

AUDIT AND ACCOUNTABILITY

7.1 Ensure your authentication_policy is Set to a Secure OptionCIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS MySQLDBMySQLDB

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

7.1 Ensure your authentication_policy is Set to a Secure OptionCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L1 MySQL RDBMS MySQLDBMySQLDB

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

7.1 Ensure your authentication_policy is Set to a Secure OptionCIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

7.8 Ensure No Anonymous Accounts ExistCIS MySQL 5.6 Enterprise Database L1 v2.0.0MySQLDB

ACCESS CONTROL

9.3 Ensure 'super_priv' is Not Set to 'Y' for Replication UsersCIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB

ACCESS CONTROL

9.3 Ensure 'super_priv' is Not Set to 'Y' for Replication UsersCIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS MySQLDBMySQLDB

ACCESS CONTROL

9.3 Ensure 'super_priv' is Not Set to 'Y' for Replication UsersCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L1 MySQL RDBMS MySQLDBMySQLDB

ACCESS CONTROL

DG0025-ORACLE11 - DBMS cryptography must be NIST FIPS 140-2 validated - '%ORACLE_HOME%\NETWORK\ADMIN\SQLNET.ora SSL_CIPHER_SUITES set to valid cipher suite'DISA STIG Oracle 11 Installation v9r1 WindowsWindows

SYSTEM AND COMMUNICATIONS PROTECTION

DG0025-ORACLE11 - DBMS cryptography must be NIST FIPS 140-2 validated - '$ORACLE_HOME/network/admin/sqlnet.ora SQLNET.SSLFIPS_140 = true'DISA STIG Oracle 11 Installation v9r1 LinuxUnix

SYSTEM AND COMMUNICATIONS PROTECTION

DG0025-ORACLE11 - DBMS cryptography must be NIST FIPS 140-2 validated - '$ORACLE_HOME/network/admin/sqlnet.ora SSL_CIPHER_SUITES is configured'DISA STIG Oracle 11 Installation v9r1 LinuxUnix

SYSTEM AND COMMUNICATIONS PROTECTION

DG0025-ORACLE11 - DBMS cryptography must be NIST FIPS 140-2 validated.DISA STIG Oracle 11 Installation v9r1 LinuxUnix
MD4X-00-000900 - MongoDB must prevent unauthorized and unintended information transfer via shared system resources.DISA STIG MongoDB Enterprise Advanced 4.x v1r4 OSUnix

SYSTEM AND COMMUNICATIONS PROTECTION

MD7X-00-003900 If passwords are used for authentication, MongoDB must transmit only encrypted representations of passwords.DISA MongoDB Enterprise Advanced 7.x STIG v1r1Unix

IDENTIFICATION AND AUTHENTICATION

O19C-00-011300 - Changes to configuration options must be audited.DISA Oracle Database 19c STIG v1r5 OracleDBOracleDB

CONFIGURATION MANAGEMENT