Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Oracle Database 11g Instance STIG

The Oracle Database 11g Instance STIG (V9 R1) has 94 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

94STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V9 · R1

CurrentPublished Wed Oct 27 2021

DBMS application user roles should not be assigned unauthorized privileges.

Oracle Database 11g Instance STIG

Assessment Title

Rule Text

Description

Discussion Text

Unauthorized access to the data can lead to loss of confidentiality and integrity of the data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-15128

Rule

SV-24705r1_rule

Severity

medium

Rule Version

DG0105-ORACLE11

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Compare privileges assigned to database application user roles to those defined in the System Security Plan.

If the assigned privileges do not match the authorized list of privileges, this is a Finding.

Implementation Procedure

Fix Text

Use the grant and revoke commands to assign the authorized privileges as listed in the System Security Plan to custom database application or application user roles.

STIG check 2 of 94 in the Oracle Database 11g Instance STIG checklist

← Previous · V-15114Developers should not be assigned excessive privileges on production databases.Next · V-15130 →Unapproved inactive or expired database accounts should not be found on the database.