Oracle Database 11.2g Security Technical Implementation Guide

The Oracle Database 11.2g Security Technical Implementation Guide (V1 R19) has 203 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

203STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R19

CurrentPublished Fri Jul 24 2020

All use of privileged accounts must be audited.

Oracle Database 11.2g Security Technical Implementation Guide

Assessment Title

Rule Text

All use of privileged accounts must be audited.

Description

Discussion Text

This is intended to limit exposure, by making it possible to trace any unauthorized access, by a privileged user account or role that has permissions on security functions or security-relevant information, to other data or functionality.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-52389

Rule

SV-66605r2_rule

Severity

medium

Rule Version

O112-C2-004200

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review auditing configuration. If it is possible for a privileged user/role to access non-security functions or information, without having the action recorded in the audit log, this is a finding.

Implementation Procedure

Fix Text

Configure DBMS auditing so that all use of privileged accounts is recorded in the audit log.

STIG check 112 of 203 in the Oracle Database 11.2g STIG checklist

← Previous · V-52387Administrators must utilize a separate, distinct administrative account when performing administrative activities, accessing database security functions, or accessing security-relevant information.Next · V-52393 →The DBA role must not be assigned excessive or unauthorized privileges.