EP11-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types - Administrators

CAT|II

CCI|CCI-000054

Rule-ID|SV-224130r508023_rule

STIG-ID|EP11-00-000100

STIG-Legacy|SV-109391

STIG-Legacy|V-100287

Vuln-ID|V-224130

EP11-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types - Users

EP11-00-000800 - The EDB Postgres Advanced Server must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

CAT|I

CCI|CCI-000213

Rule-ID|SV-224132r836872_rule

STIG-ID|EP11-00-000800

STIG-Legacy|SV-109395

STIG-Legacy|V-100291

Vuln-ID|V-224132

EP11-00-000900 - The EDB Postgres Advanced Server must protect against a user falsely repudiating by ensuring all accounts are individual, unique, and not shared.

CCI|CCI-000166

Rule-ID|SV-224133r508023_rule

STIG-ID|EP11-00-000900

STIG-Legacy|SV-109397

STIG-Legacy|V-100293

Vuln-ID|V-224133

EP11-00-001000 - The EDB Postgres Advanced Server must be configured to provide audit record generation capability for DoD-defined auditable events within all EDB Postgres Advanced Server/database components.

CCI|CCI-000169

Rule-ID|SV-224134r508023_rule

STIG-ID|EP11-00-001000

STIG-Legacy|SV-109399

STIG-Legacy|V-100295

Vuln-ID|V-224134

EP11-00-001200 - The EDB Postgres Advanced Server must generate audit records for DoD-defined auditable events.

CCI|CCI-000131

CCI|CCI-000134

CCI|CCI-000172

CCI|CCI-001487

CCI|CCI-001814

Rule-ID|SV-224136r557457_rule

STIG-ID|EP11-00-001200

STIG-Legacy|SV-109403

STIG-Legacy|V-100299

Vuln-ID|V-224136

EP11-00-001400 - The EDB Postgres Advanced Server must initiate support of session auditing upon startup - edb_audit

CCI|CCI-001464

Rule-ID|SV-224138r508023_rule

STIG-ID|EP11-00-001400

STIG-Legacy|SV-109407

STIG-Legacy|V-100303

Vuln-ID|V-224138

EP11-00-001400 - The EDB Postgres Advanced Server must initiate support of session auditing upon startup - edb_audit_statement

EP11-00-002200 - The EDB Postgres Advanced Server must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-224145r508023_rule

STIG-ID|EP11-00-002200

STIG-Legacy|SV-109421

STIG-Legacy|V-100317

Vuln-ID|V-224145

EP11-00-003210 - EDB Postgres Advanced Server software modules, to include stored procedures, functions, and triggers must be monitored to discover unauthorized changes.

CCI|CCI-001499

Rule-ID|SV-224155r508023_rule

STIG-ID|EP11-00-003210

STIG-Legacy|SV-109441

STIG-Legacy|V-100337

Vuln-ID|V-224155

EP11-00-003300 - The EDB Postgres Advanced Server software installation account must be restricted to authorized users.

Rule-ID|SV-224156r836873_rule

STIG-ID|EP11-00-003300

STIG-Legacy|SV-109443

STIG-Legacy|V-100339

Vuln-ID|V-224156

EP11-00-003500 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be owned by database/EDB Postgres Advanced Server principals authorized for ownership.

Rule-ID|SV-224158r508023_rule

STIG-ID|EP11-00-003500

STIG-Legacy|SV-109447

STIG-Legacy|V-100343

Vuln-ID|V-224158

EP11-00-003700 - Default, demonstration and sample databases, database objects, and applications must be removed.

CCI|CCI-000381

Rule-ID|SV-224160r508023_rule

STIG-ID|EP11-00-003700

STIG-Legacy|SV-109451

STIG-Legacy|V-100347

Vuln-ID|V-224160

EP11-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments - address

CCI|CCI-000382

Rule-ID|SV-224164r508023_rule

STIG-ID|EP11-00-004100

STIG-Legacy|SV-109459

STIG-Legacy|V-100355

Vuln-ID|V-224164

EP11-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments - port

EP11-00-004250 - If DBMS authentication, using passwords, is employed, EDB Postgres Advanced Server must enforce the DoD standards for password complexity and lifetime.

CCI|CCI-000192

Rule-ID|SV-224166r836874_rule

STIG-ID|EP11-00-004250

STIG-Legacy|SV-109463

STIG-Legacy|V-100359

Vuln-ID|V-224166

EP11-00-004300 - If passwords are used for authentication, the EDB Postgres Advanced Server must store only hashed, salted representations of passwords.

CCI|CCI-000196

Rule-ID|SV-224167r836875_rule

STIG-ID|EP11-00-004300

STIG-Legacy|SV-109465

STIG-Legacy|V-100361

Vuln-ID|V-224167

EP11-00-004810 - Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

CCI|CCI-000206

Rule-ID|SV-224171r508023_rule

STIG-ID|EP11-00-004810

STIG-Legacy|SV-109473

STIG-Legacy|V-100369

Vuln-ID|V-224171

EP11-00-004820 - When using command-line tools such as psql, users must use a logon method that does not expose the password.

Rule-ID|SV-224172r508023_rule

STIG-ID|EP11-00-004820

STIG-Legacy|SV-109475

STIG-Legacy|V-100371

Vuln-ID|V-224172

EP11-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection - version

CCI|CCI-000803

CCI|CCI-002450

Rule-ID|SV-224174r836880_rule

STIG-ID|EP11-00-004900

STIG-Legacy|SV-109477

STIG-Legacy|V-100373

Vuln-ID|V-224174

EP11-00-005000 - The DBMS must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

CCI|CCI-000804

Rule-ID|SV-224175r508023_rule

STIG-ID|EP11-00-005000

STIG-Legacy|SV-109479

STIG-Legacy|V-100375

Vuln-ID|V-224175

EP11-00-005100 - The EDB Postgres Advanced Server must separate user functionality (including user interface services) from database management functionality.

CCI|CCI-001082

Rule-ID|SV-224176r508023_rule

STIG-ID|EP11-00-005100

STIG-Legacy|SV-110299

STIG-Legacy|V-101195

Vuln-ID|V-224176

EP11-00-005600 - In the event of a system failure, the DBMS must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes.

CCI|CCI-001665

Rule-ID|SV-224177r508023_rule

STIG-ID|EP11-00-005600

STIG-Legacy|SV-109481

STIG-Legacy|V-100377

Vuln-ID|V-224177

EP11-00-005800 - The EDB Postgres Advanced Server must isolate security functions from non-security functions.

CCI|CCI-001084

Rule-ID|SV-224179r508023_rule

STIG-ID|EP11-00-005800

STIG-Legacy|SV-109485

STIG-Legacy|V-100381

Vuln-ID|V-224179

EP11-00-005900 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

CCI|CCI-001090

Rule-ID|SV-224180r508023_rule

STIG-ID|EP11-00-005900

STIG-Legacy|SV-109487

STIG-Legacy|V-100383

Vuln-ID|V-224180

EP11-00-006200 - The EDB Postgres Advanced Server must check the validity of all data inputs except those specifically identified by the organization.

CCI|CCI-001310

Rule-ID|SV-224182r508023_rule

STIG-ID|EP11-00-006200

STIG-Legacy|SV-109491

STIG-Legacy|V-100387

Vuln-ID|V-224182

EP11-00-006300 - The EDB Postgres Advanced Server and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-224183r508023_rule

STIG-ID|EP11-00-006300

STIG-Legacy|SV-109493

STIG-Legacy|V-100389

Vuln-ID|V-224183

EP11-00-006400 - The EDB Postgres Advanced Server and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-224184r508023_rule

STIG-ID|EP11-00-006400

STIG-Legacy|SV-109495

STIG-Legacy|V-100391

Vuln-ID|V-224184

EP11-00-006500 - The EDB Postgres Advanced Server must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

CCI|CCI-001312

Rule-ID|SV-224185r508023_rule

STIG-ID|EP11-00-006500

STIG-Legacy|SV-109497

STIG-Legacy|V-100393

Vuln-ID|V-224185

EP11-00-006600 - The EDB Postgres Advanced Server must reveal detailed error messages only to the ISSO, ISSM, SA, and DBA.

CCI|CCI-001314

Rule-ID|SV-224186r508023_rule

STIG-ID|EP11-00-006600

STIG-Legacy|SV-109499

STIG-Legacy|V-100395

Vuln-ID|V-224186

EP11-00-006700 - The EDB Postgres Advanced Server must automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.

CCI|CCI-002361

Rule-ID|SV-224187r508023_rule

STIG-ID|EP11-00-006700

STIG-Legacy|SV-109501

STIG-Legacy|V-100397

Vuln-ID|V-224187

Detections

Analytics

EDB PostgreSQL Advanced Server v11 DB Audit v2r2

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Jun 17, 2024 Miscellaneous Metadata updated.
Revision 1.1 Apr 30, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.