Item Search

NameAudit NamePluginCategory
1.1 Ensure the appropriate MongoDB software version/patches are installedCIS MongoDB 5 v1.2.0 L1 UnixUnix

CONFIGURATION MANAGEMENT

1.7.1.5 Ensure permissions on /etc/issue are configuredCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.7.4 Ensure permissions on /etc/motd are configuredCIS CentOS 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

1.7.4 Ensure permissions on /etc/motd are configuredCIS Oracle Linux 6 Workstation L1 v2.0.0Unix

ACCESS CONTROL

1.7.4 Ensure permissions on /etc/motd are configuredCIS Red Hat 6 Server L1 v3.0.0Unix

ACCESS CONTROL

1.7.5 Ensure permissions on /etc/issue are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

1.7.5 Ensure permissions on /etc/issue are configuredCIS CentOS Linux 8 Workstation L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.7.5 Ensure permissions on /etc/issue are configuredCIS Fedora 28 Family Linux Workstation L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.7.6 Ensure permissions on /etc/issue are configuredCIS Amazon Linux 2 STIG v2.0.1 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.7.6 Ensure permissions on /etc/issue.net are configuredCIS CentOS Linux 8 Workstation L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.7.6 Ensure permissions on /etc/issue.net are configuredCIS Fedora 28 Family Linux Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.7.6 Ensure permissions on /etc/issue.net are configuredCIS Red Hat 6 Server L1 v3.0.0Unix

ACCESS CONTROL

1.7.6 Ensure permissions on /etc/issue.net are configuredCIS Red Hat 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

1.8.1.4 Ensure permissions on /etc/motd are configuredCIS SUSE Linux Enterprise 12 v3.2.1 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.8.1.4 Ensure permissions on /etc/motd are configuredCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0Unix

CONFIGURATION MANAGEMENT

1.8.1.5 Ensure permissions on /etc/issue are configuredCIS Fedora 19 Family Linux Workstation L1 v1.0.0Unix

ACCESS CONTROL

1.13.10 Ensure 'Trigger a quick scan after X days without any scans' is set to 'Enabled: 7'CIS Microsoft Defender Antivirus v1.0.0 L1 ServerWindows

SYSTEM AND INFORMATION INTEGRITY

1.70 CISC-RT-000910CIS Cisco NX OS Switch RTR STIG v1.1.0 CAT IICisco

SECURITY ASSESSMENT AND AUTHORIZATION, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.1 Ensure Authentication is configuredCIS MongoDB 5 v1.2.0 L1 WindowsWindows

IDENTIFICATION AND AUTHENTICATION

2.1 Ensure Authentication is configuredCIS MongoDB 5 v1.2.0 L1 UnixUnix

IDENTIFICATION AND AUTHENTICATION

2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionCIS MongoDB 5 v1.2.0 L1 UnixUnix

IDENTIFICATION AND AUTHENTICATION

2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionCIS MongoDB 5 v1.2.0 L1 WindowsWindows

IDENTIFICATION AND AUTHENTICATION

3.1 Ensure least privilege for database accountsCIS MongoDB 5 v1.2.0 L1 MongoDBMongoDB

ACCESS CONTROL

3.2 Ensure that role-based access control is enabled and configured appropriatelyCIS MongoDB 5 v1.2.0 L1 MongoDBMongoDB

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

3.3 Ensure that MongoDB is run using a non-privileged, dedicated service accountCIS MongoDB 5 v1.2.0 L1 UnixUnix

ACCESS CONTROL

3.4.4 Ensure permissions on /etc/hosts.allow are configuredCIS Red Hat 6 Server L1 v3.0.0Unix

ACCESS CONTROL

3.4.5 Ensure permissions on /etc/hosts.deny are configuredCIS Red Hat 6 Server L1 v3.0.0Unix

ACCESS CONTROL

4.2 Ensure Weak Protocols are DisabledCIS MongoDB 5 v1.2.0 L1 WindowsWindows

SYSTEM AND COMMUNICATIONS PROTECTION

4.3 Ensure Encryption of Data in Transit TLS or SSL (Transport Encryption)CIS MongoDB 5 v1.2.0 L1 UnixUnix

SYSTEM AND COMMUNICATIONS PROTECTION

4.4 Ensure Federal Information Processing Standard (FIPS) is enabledCIS MongoDB 5 v1.2.0 L2 WindowsWindows

SYSTEM AND COMMUNICATIONS PROTECTION

5.3 Ensure that logging captures as much information as possibleCIS MongoDB 5 v1.2.0 L2 WindowsWindows

AUDIT AND ACCOUNTABILITY

6.1 Ensure that MongoDB uses a non-default portCIS MongoDB 5 v1.2.0 L1 UnixUnix

CONFIGURATION MANAGEMENT

6.1 Ensure that MongoDB uses a non-default portCIS MongoDB 5 v1.2.0 L1 WindowsWindows

CONFIGURATION MANAGEMENT

6.1.3 Ensure permissions on /etc/passwd- are configuredCIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.1.5 Ensure permissions on /etc/group- are configuredCIS Debian Family Server L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.1.5 Ensure permissions on /etc/group- are configuredCIS Debian Family Workstation L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.1.5 Ensure permissions on /etc/group- are configuredCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.1.6 Ensure permissions on /etc/passwd- are configuredCIS Aliyun Linux 2 L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.1.8 Ensure permissions on /etc/group- are configuredCIS Aliyun Linux 2 L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.1.8 Ensure permissions on /etc/group- are configuredCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.1.8 Ensure permissions on /etc/group- are configuredCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.1.8 Ensure permissions on /etc/passwd- are configuredCIS Debian 9 Workstation L1 v1.0.1Unix

IDENTIFICATION AND AUTHENTICATION

6.3 Ensure that server-side scripting is disabled if not neededCIS MongoDB 5 v1.2.0 L2 UnixUnix

CONFIGURATION MANAGEMENT

7.2 Ensure appropriate database file permissions are set.CIS MongoDB 5 v1.2.0 L1 UnixUnix

ACCESS CONTROL

7.2 Ensure appropriate database file permissions are set.CIS MongoDB 5 v1.2.0 L1 WindowsWindows

ACCESS CONTROL

9.1.5 Verify Permissions on /etc/groupCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

ACCESS CONTROL

CISC-RT-000820 - The Cisco multicast Rendezvous Point (RP) router must be configured to filter Protocol Independent Multicast (PIM) Join messages received from the Designated Router (DR) for any undesirable multicast groups.DISA Cisco IOS XR Router RTR STIG v3r3Cisco

SYSTEM AND COMMUNICATIONS PROTECTION

SLEM-05-411075 - SLEM 5 must not have duplicate User IDs (UIDs) for interactive users.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611015 - SLEM 5 must enforce passwords that contain at least one lowercase character.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-654235 - SLEM 5 must generate audit records for the "/var/log/btmp" file.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY