Oracle Database 11.2g Security Technical Implementation Guide

The Oracle Database 11.2g Security Technical Implementation Guide (V1 R19) has 203 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

203STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R19

CurrentPublished Fri Jul 24 2020

Credentials stored and used by the DBMS to access remote databases or applications must be authorized and restricted to authorized users.

Oracle Database 11.2g Security Technical Implementation Guide

Assessment Title

Rule Text

Credentials stored and used by the DBMS to access remote databases or applications must be authorized and restricted to authorized users.

Description

Discussion Text

Credentials defined for access to remote databases or applications may provide unauthorized access to additional databases and applications to unauthorized or malicious users.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-54039

Rule

SV-68279r1_rule

Severity

medium

Rule Version

O112-BP-025200

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the list of defined database links generated from the DBMS.

Compare to the list in the System Security Plan with the DBA.

If no database links are listed in the database and in the System Security Plan, this check is Not a Finding.

If any database links are defined in the DBMS, verify the authorization for the definition in the System Security Plan.

If any database links exist that are not authorized or not listed in the System Security Plan, this is a Finding.

Implementation Procedure

Fix Text

Grant access to database links to authorized users or applications only.

Document all database links access authorizations in the System Security Plan.

STIG check 185 of 203 in the Oracle Database 11.2g STIG checklist

← Previous · V-54033Sensitive data stored in the database must be identified in the System Security Plan and AIS Functional Architecture documentation.Next · V-54041 →The DBMS must not share a host supporting an independent security service.