EP11-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-224130r879511_rule

STIG-ID|EP11-00-000100

STIG-Legacy|SV-109391

STIG-Legacy|V-100287

Vuln-ID|V-224130

EP11-00-000800 - The EDB Postgres Advanced Server must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

800-53|AC-3

CAT|I

CCI|CCI-000213

Rule-ID|SV-224132r879530_rule

STIG-ID|EP11-00-000800

STIG-Legacy|SV-109395

STIG-Legacy|V-100291

Vuln-ID|V-224132

EP11-00-000900 - The EDB Postgres Advanced Server must protect against a user falsely repudiating by ensuring all accounts are individual, unique, and not shared.

800-53|AU-10

CCI|CCI-000166

Rule-ID|SV-224133r879554_rule

STIG-ID|EP11-00-000900

STIG-Legacy|SV-109397

STIG-Legacy|V-100293

Vuln-ID|V-224133

EP11-00-001000 - The EDB Postgres Advanced Server must be configured to provide audit record generation capability for DoD-defined auditable events within all EDB Postgres Advanced Server/database components.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-224134r879559_rule

STIG-ID|EP11-00-001000

STIG-Legacy|SV-109399

STIG-Legacy|V-100295

Vuln-ID|V-224134

EP11-00-001200 - The EDB Postgres Advanced Server must generate audit records for DoD-defined auditable events.

800-53|AU-3

800-53|AU-12c.

800-53|CM-5(1)

CCI|CCI-000131

CCI|CCI-000134

CCI|CCI-000172

CCI|CCI-001487

CCI|CCI-001814

Rule-ID|SV-224136r879561_rule

STIG-ID|EP11-00-001200

STIG-Legacy|SV-109403

STIG-Legacy|V-100299

Vuln-ID|V-224136

EP11-00-001400 - The EDB Postgres Advanced Server must initiate support of session auditing upon startup.

800-53|AU-14(1)

CCI|CCI-001464

Rule-ID|SV-224138r879562_rule

STIG-ID|EP11-00-001400

STIG-Legacy|SV-109407

STIG-Legacy|V-100303

Vuln-ID|V-224138

EP11-00-002200 - The EDB Postgres Advanced Server must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

800-53|AU-3(1)

CCI|CCI-000135

Rule-ID|SV-224145r879569_rule

STIG-ID|EP11-00-002200

STIG-Legacy|SV-109421

STIG-Legacy|V-100317

Vuln-ID|V-224145

EP11-00-003210 - EDB Postgres Advanced Server software modules, to include stored procedures, functions, and triggers must be monitored to discover unauthorized changes.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-224155r879586_rule

STIG-ID|EP11-00-003210

STIG-Legacy|SV-109441

STIG-Legacy|V-100337

Vuln-ID|V-224155

EP11-00-003300 - The EDB Postgres Advanced Server software installation account must be restricted to authorized users.

Rule-ID|SV-224156r879586_rule

STIG-ID|EP11-00-003300

STIG-Legacy|SV-109443

STIG-Legacy|V-100339

Vuln-ID|V-224156

EP11-00-003500 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be owned by database/EDB Postgres Advanced Server principals authorized for ownership.

Rule-ID|SV-224158r879586_rule

STIG-ID|EP11-00-003500

STIG-Legacy|SV-109447

STIG-Legacy|V-100343

Vuln-ID|V-224158

EP11-00-003700 - Default, demonstration and sample databases, database objects, and applications must be removed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-224160r879587_rule

STIG-ID|EP11-00-003700

STIG-Legacy|SV-109451

STIG-Legacy|V-100347

Vuln-ID|V-224160

EP11-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-224164r879588_rule

STIG-ID|EP11-00-004100

STIG-Legacy|SV-109459

STIG-Legacy|V-100355

Vuln-ID|V-224164

EP11-00-004250 - If DBMS authentication, using passwords, is employed, EDB Postgres Advanced Server must enforce the DoD standards for password complexity and lifetime.

800-53|IA-5(1)(a)

CCI|CCI-000192

Rule-ID|SV-224166r879601_rule

STIG-ID|EP11-00-004250

STIG-Legacy|SV-109463

STIG-Legacy|V-100359

Vuln-ID|V-224166

EP11-00-004300 - If passwords are used for authentication, the EDB Postgres Advanced Server must store only hashed, salted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000196

Rule-ID|SV-224167r879608_rule

STIG-ID|EP11-00-004300

STIG-Legacy|SV-109465

STIG-Legacy|V-100361

Vuln-ID|V-224167

EP11-00-004810 - Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

800-53|IA-6

CCI|CCI-000206

Rule-ID|SV-224171r879615_rule

STIG-ID|EP11-00-004810

STIG-Legacy|SV-109473

STIG-Legacy|V-100369

Vuln-ID|V-224171

EP11-00-004820 - When using command-line tools such as psql, users must use a logon method that does not expose the password.

Rule-ID|SV-224172r879615_rule

STIG-ID|EP11-00-004820

STIG-Legacy|SV-109475

STIG-Legacy|V-100371

Vuln-ID|V-224172

EP11-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for all cryptographic operations including generation of cryptographic hashes and data protection - version

800-53|IA-7

800-53|SC-13

CCI|CCI-000803

CCI|CCI-002450

Rule-ID|SV-224174r879616_rule

STIG-ID|EP11-00-004900

STIG-Legacy|SV-109477

STIG-Legacy|V-100373

Vuln-ID|V-224174

EP11-00-005000 - The DBMS must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

800-53|IA-8

CCI|CCI-000804

Rule-ID|SV-224175r879617_rule

STIG-ID|EP11-00-005000

STIG-Legacy|SV-109479

STIG-Legacy|V-100375

Vuln-ID|V-224175

EP11-00-005100 - The EDB Postgres Advanced Server must separate user functionality (including user interface services) from database management functionality.

800-53|SC-2

CCI|CCI-001082

Rule-ID|SV-224176r879631_rule

STIG-ID|EP11-00-005100

STIG-Legacy|SV-110299

STIG-Legacy|V-101195

Vuln-ID|V-224176

EP11-00-005600 - In the event of a system failure, the DBMS must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes.

800-53|SC-24

CCI|CCI-001665

Rule-ID|SV-224177r879641_rule

STIG-ID|EP11-00-005600

STIG-Legacy|SV-109481

STIG-Legacy|V-100377

Vuln-ID|V-224177

EP11-00-005800 - The EDB Postgres Advanced Server must isolate security functions from non-security functions.

800-53|SC-3

CCI|CCI-001084

Rule-ID|SV-224179r879643_rule

STIG-ID|EP11-00-005800

STIG-Legacy|SV-109485

STIG-Legacy|V-100381

Vuln-ID|V-224179

EP11-00-005900 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-224180r879649_rule

STIG-ID|EP11-00-005900

STIG-Legacy|SV-109487

STIG-Legacy|V-100383

Vuln-ID|V-224180

EP11-00-006200 - The EDB Postgres Advanced Server must check the validity of all data inputs except those specifically identified by the organization.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-224182r879652_rule

STIG-ID|EP11-00-006200

STIG-Legacy|SV-109491

STIG-Legacy|V-100387

Vuln-ID|V-224182

EP11-00-006300 - The EDB Postgres Advanced Server and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-224183r879652_rule

STIG-ID|EP11-00-006300

STIG-Legacy|SV-109493

STIG-Legacy|V-100389

Vuln-ID|V-224183

EP11-00-006400 - The EDB Postgres Advanced Server and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-224184r879652_rule

STIG-ID|EP11-00-006400

STIG-Legacy|SV-109495

STIG-Legacy|V-100391

Vuln-ID|V-224184

EP11-00-006500 - The EDB Postgres Advanced Server must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

Detections

Analytics

EDB PostgreSQL Advanced Server v11 DB Audit v2r3

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous