CD12-00-000100 - PostgreSQL must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

800-53|CM-7b.

CAT|II

CCI|CCI-000382

Rule-ID|SV-233511r960966_rule

STIG-ID|CD12-00-000100

Vuln-ID|V-233511

CD12-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events.

800-53|AU-3

CCI|CCI-000134

Rule-ID|SV-233512r960903_rule

STIG-ID|CD12-00-000200

Vuln-ID|V-233512

CD12-00-000300 - Security-relevant software updates to PostgreSQL must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

800-53|SI-2c.

CCI|CCI-002605

Rule-ID|SV-233513r961683_rule

STIG-ID|CD12-00-000300

Vuln-ID|V-233513

CD12-00-000600 - PostgreSQL must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

800-53|SI-11a.

CCI|CCI-001312

Rule-ID|SV-233516r961167_rule

STIG-ID|CD12-00-000600

Vuln-ID|V-233516

CD12-00-001200 - PostgreSQL must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

800-53|AC-10

CCI|CCI-000054

Rule-ID|SV-233522r960735_rule

STIG-ID|CD12-00-001200

Vuln-ID|V-233522

CD12-00-001800 - PostgreSQL must check the validity of all data inputs except those specifically identified by the organization.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-233526r961158_rule

STIG-ID|CD12-00-001800

Vuln-ID|V-233526

CD12-00-001900 - PostgreSQL and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-233527r961158_rule

STIG-ID|CD12-00-001900

Vuln-ID|V-233527

CD12-00-002000 - PostgreSQL and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-233528r961158_rule

STIG-ID|CD12-00-002000

Vuln-ID|V-233528

CD12-00-002400 - PostgreSQL must record time stamps, in audit records and application data that can be mapped to Coordinated Universal Time (UTC, formerly GMT).

800-53|AU-8b.

CCI|CCI-001890

Rule-ID|SV-233532r961443_rule

STIG-ID|CD12-00-002400

Vuln-ID|V-233532

CD12-00-002700 - PostgreSQL must provide an immediate alert to appropriate support staff of all audit log failures.

800-53|AU-5(2)

CCI|CCI-001858

Rule-ID|SV-233535r961401_rule

STIG-ID|CD12-00-002700

Vuln-ID|V-233535

CD12-00-002800 - PostgreSQL must be configurable to overwrite audit log records, oldest first (First-In-First-Out [FIFO]), in the event of unavailability of space for more audit log records.

800-53|AU-5b.

CAT|III

CCI|CCI-000140

Rule-ID|SV-233536r960915_rule

STIG-ID|CD12-00-002800

Vuln-ID|V-233536

CD12-00-002900 - PostgreSQL must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

Rule-ID|SV-233537r960915_rule

STIG-ID|CD12-00-002900

Vuln-ID|V-233537

CD12-00-003000 - PostgreSQL must maintain the confidentiality and integrity of information during reception.

800-53|SC-8(2)

CCI|CCI-002422

Rule-ID|SV-233538r961641_rule

STIG-ID|CD12-00-003000

Vuln-ID|V-233538

CD12-00-003200 - The PostgreSQL software installation account must be restricted to authorized users.

800-53|CM-5(6)

CAT|I

CCI|CCI-001499

Rule-ID|SV-233540r960960_rule

STIG-ID|CD12-00-003200

Vuln-ID|V-233540

CD12-00-003300 - Database software, including PostgreSQL configuration files, must be stored in dedicated directories separate from the host OS and other applications.

Rule-ID|SV-233541r960960_rule

STIG-ID|CD12-00-003300

Vuln-ID|V-233541

CD12-00-003500 - PostgreSQL must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

800-53|AU-3(1)

CCI|CCI-000135

Rule-ID|SV-233542r960909_rule

STIG-ID|CD12-00-003500

Vuln-ID|V-233542

CD12-00-003600 - Execution of software modules (to include functions and trigger procedures) with elevated privileges must be restricted to necessary cases only.

800-53|AC-6(8)

CCI|CCI-002233

Rule-ID|SV-233543r961359_rule

STIG-ID|CD12-00-003600

Vuln-ID|V-233543

CD12-00-003700 - When invalid inputs are received, PostgreSQL must behave in a predictable and documented manner that reflects organizational and system objectives.

800-53|SI-10(3)

CCI|CCI-002754

Rule-ID|SV-233544r961656_rule

STIG-ID|CD12-00-003700

Vuln-ID|V-233544

CD12-00-004100 - PostgreSQL must produce audit records of its enforcement of access restrictions associated with changes to the configuration of PostgreSQL or database(s).

800-53|CM-5(1)

CCI|CCI-003938

Rule-ID|SV-233547r998196_rule

STIG-ID|CD12-00-004100

Vuln-ID|V-233547

CD12-00-004400 - PostgreSQL must generate audit records when categorized information (e.g., classification levels/security levels) is accessed.

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-233551r961797_rule

STIG-ID|CD12-00-004400

Vuln-ID|V-233551

CD12-00-004500 - PostgreSQL must generate audit records when unsuccessful attempts to access security objects occur.

Rule-ID|SV-233552r961791_rule

STIG-ID|CD12-00-004500

Vuln-ID|V-233552

CD12-00-004600 - PostgreSQL must generate audit records when unsuccessful logons or connection attempts occur.

Rule-ID|SV-233553r961824_rule

STIG-ID|CD12-00-004600

Vuln-ID|V-233553

CD12-00-004700 - PostgreSQL must generate audit records showing starting and ending time for user access to the database(s).

Rule-ID|SV-233554r961830_rule

STIG-ID|CD12-00-004700

Vuln-ID|V-233554

CD12-00-004800 - PostgreSQL must generate audit records when unsuccessful attempts to modify security objects occur.

Rule-ID|SV-233555r961803_rule

STIG-ID|CD12-00-004800

Vuln-ID|V-233555

CD12-00-004900 - PostgreSQL must generate audit records when privileges/permissions are added.

Rule-ID|SV-233556r961800_rule

STIG-ID|CD12-00-004900

Vuln-ID|V-233556

CD12-00-005000 - PostgreSQL must generate audit records when unsuccessful attempts to delete categorized information (e.g., classification levels/security levels) occur.

Rule-ID|SV-233557r961821_rule

STIG-ID|CD12-00-005000

Vuln-ID|V-233557

CD12-00-005100 - PostgreSQL must generate audit records when successful logons or connections occur.

Rule-ID|SV-233558r961824_rule

STIG-ID|CD12-00-005100

Vuln-ID|V-233558

CD12-00-005200 - PostgreSQL must generate audit records when security objects are deleted.

Rule-ID|SV-233559r961818_rule

STIG-ID|CD12-00-005200

Vuln-ID|V-233559

CD12-00-005300 - PostgreSQL must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-233560r960885_rule

STIG-ID|CD12-00-005300

Vuln-ID|V-233560

CD12-00-005400 - PostgreSQL must generate audit records when unsuccessful attempts to delete privileges/permissions occur.

Rule-ID|SV-233561r961812_rule

STIG-ID|CD12-00-005400

Vuln-ID|V-233561

CD12-00-005500 - PostgreSQL must be able to generate audit records when privileges/permissions are retrieved.

Rule-ID|SV-233562r960885_rule

STIG-ID|CD12-00-005500

Vuln-ID|V-233562

CD12-00-005600 - PostgreSQL must generate audit records when unsuccessful attempts to modify categorized information (e.g., classification levels/security levels) occur.

Rule-ID|SV-233563r961809_rule

STIG-ID|CD12-00-005600

Vuln-ID|V-233563

CD12-00-005700 - PostgreSQL must generate audit records when unsuccessful accesses to objects occur.

Rule-ID|SV-233564r961836_rule

STIG-ID|CD12-00-005700

Vuln-ID|V-233564

CD12-00-005800 - PostgreSQL must generate audit records for all privileged activities or other system-level access.

Rule-ID|SV-233565r961827_rule

STIG-ID|CD12-00-005800

Vuln-ID|V-233565

CD12-00-005900 - PostgreSQL must generate audit records when unsuccessful attempts to access categorized information (e.g., classification levels/security levels) occur.

Rule-ID|SV-233566r961797_rule

STIG-ID|CD12-00-005900

Vuln-ID|V-233566

CD12-00-006000 - PostgreSQL must be able to generate audit records when security objects are accessed.

Rule-ID|SV-233567r961791_rule

STIG-ID|CD12-00-006000

Vuln-ID|V-233567

CD12-00-006100 - PostgreSQL must generate audit records when privileges/permissions are deleted.

Rule-ID|SV-233568r961812_rule

STIG-ID|CD12-00-006100

Vuln-ID|V-233568

CD12-00-006200 - PostgreSQL must generate audit records when concurrent logons/connections by the same user from different workstations occur.

Rule-ID|SV-233569r961833_rule

STIG-ID|CD12-00-006200

Vuln-ID|V-233569

CD12-00-006300 - PostgreSQL must generate audit records when unsuccessful attempts to delete security objects occur.

Rule-ID|SV-233570r961818_rule

STIG-ID|CD12-00-006300

Vuln-ID|V-233570

CD12-00-006400 - PostgreSQL must generate audit records when privileges/permissions are modified.

Rule-ID|SV-233571r961800_rule

STIG-ID|CD12-00-006400

Vuln-ID|V-233571

CD12-00-006500 - PostgreSQL must generate audit records when unsuccessful attempts to execute privileged activities or other system-level access occur.

Rule-ID|SV-233572r961827_rule

STIG-ID|CD12-00-006500

Vuln-ID|V-233572

CD12-00-006600 - PostgreSQL must generate audit records when security objects are modified.

Detections

Analytics

DISA STIG Crunchy Data PostgreSQL DB v3r1

Audit Details

File Details

Audit Changelog

No revisions found