Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Oracle Database 11g Instance STIG

The Oracle Database 11g Instance STIG (V9 R1) has 94 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

94STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V9 · R1

CurrentPublished Wed Oct 27 2021

The Oracle SQL92_SECURITY parameter should be set to TRUE.

Oracle Database 11g Instance STIG

Assessment Title

Rule Text

Description

Discussion Text

The configuration option SQL92_SECURITY specifies whether table-level SELECT privileges are required to execute an update or delete that references table column values. If this option is disabled (set to FALSE), the UPDATE privilege can be used to determine values that should require SELECT privileges.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-2556

Rule

SV-24919r2_rule

Severity

medium

Rule Version

DO3540-ORACLE11

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From SQL*Plus:

  select value from v$parameter where name = 'sql92_security';

If the value returned is set to FALSE, this is a Finding.

If the parameter is set to TRUE or does not exist, this is Not a Finding.

Implementation Procedure

Fix Text

Enable SQL92 security.

From SQL*Plus:

  alter system set sql92_security = TRUE scope = spfile;

The above SQL*Plus command will set the parameter to take effect at next system startup.

STIG check 62 of 94 in the Oracle Database 11g Instance STIG checklist

← Previous · V-2555The Oracle REMOTE_OS_ROLES parameter should be set to FALSE.Next · V-2558 →The Oracle REMOTE_LOGIN_PASSWORDFILE parameter should be set to EXCLUSIVE or NONE.