V2R2 changes
Redis Enterprise 6.x STIG V2R2 (2024-10-24) replaced V2R1 (2024-07-24): 6 checks updated. It has 71 checks, against 71 in V2R1.
V2R2 checklistV2R1 checklist Compare V2R1 and V2R2 in STIG Compare
- 0 added
- 0 removed
- 6 updated
Updated fields: CCIs 4Severity 2
Updated in V2R2 (6)
V-251208CAT IIRedis Enterprise DBMS must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.CCIs
V-251221CAT IIRedis Enterprise DBMS must require users to reauthenticate when organization-defined circumstances or situations require reauthentication.CCIs
V-251223CAT IIIf passwords are used for authentication, Redis Enterprise DBMS must store only hashed, salted representations of passwords.CCIs
V-251243CAT IRedis Enterprise DBMS must implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.Severity
V-251244CAT IRedis Enterprise DBMS must implement cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.Severity
V-251428CAT IIIf DBMS authentication using passwords is employed, Redis Enterprise DBMS must enforce the DOD standards for password complexity and lifetime.CCIs
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R2 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.