Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Oracle Database 11g Instance STIG

The Oracle Database 11g Instance STIG (V9 R1) has 94 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

94STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V9 · R1

CurrentPublished Wed Oct 27 2021

Case sensitivity for passwords should be enabled.

Oracle Database 11g Instance STIG

Assessment Title

Rule Text

Description

Discussion Text

Enablement of password case sensitivity allows Oracle password complexity to meet DoD password requirements. Password complexity decreases the likelihood of successful password attacks by malicious users.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-16033

Rule

SV-60351r1_rule

Severity

medium

Rule Version

DO6748-ORACLE11

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From SQL*Plus:

  select value from v$parameter where name = 'sec_case_sensitive_logon';

If the value returned is not TRUE, this is a Finding.

Implementation Procedure

Fix Text

Enable case sensitive passwords.

From SQL*Plus:

  alter system set sec_case_sensitive_logon = TRUE scope = both;

The above SQL*Plus command will set the parameter to take effect immediately and permanently at next system startup.

NOTE:  Password and account requirements have changed for DoD since the STIG requirement listed in the table for this check was published.

STIG check 41 of 94 in the Oracle Database 11g Instance STIG checklist

← Previous · V-15747The /diag subdirectory under the directory assigned to the DIAGNOSTIC_DEST parameter must be protected from unauthorized access.Next · V-16035 →The Oracle SEC_MAX_FAILED_LOGIN_ATTEMPTS parameter should be set to an ISSO-approved value between 1 and 3.