PPS9-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types - Administrators

CAT|II

CCI|CCI-000054

Rule-ID|SV-213561r508024_rule

STIG-ID|PPS9-00-000100

STIG-Legacy|SV-83479

STIG-Legacy|V-68875

Vuln-ID|V-213561

PPS9-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types - Users

PPS9-00-000800 - The EDB Postgres Advanced Server must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

CAT|I

CCI|CCI-000213

Rule-ID|SV-213563r836837_rule

STIG-ID|PPS9-00-000800

STIG-Legacy|SV-83483

STIG-Legacy|V-68879

Vuln-ID|V-213563

PPS9-00-000900 - The EDB Postgres Advanced Server must protect against a user falsely repudiating having performed organization-defined actions.

CCI|CCI-000166

Rule-ID|SV-213564r508024_rule

STIG-ID|PPS9-00-000900

STIG-Legacy|SV-83485

STIG-Legacy|V-68881

Vuln-ID|V-213564

PPS9-00-001000 - The EDB Postgres Advanced Server must provide audit record generation capability for DoD-defined auditable events within all EDB Postgres Advanced Server/database components.

CCI|CCI-000169

Rule-ID|SV-213565r508024_rule

STIG-ID|PPS9-00-001000

STIG-Legacy|SV-83487

STIG-Legacy|V-68883

Vuln-ID|V-213565

PPS9-00-001200 - The EDB Postgres Advanced Server must generate audit records when privileges/permissions are retrieved.

CCI|CCI-000172

Rule-ID|SV-213567r508024_rule

STIG-ID|PPS9-00-001200

STIG-Legacy|SV-83491

STIG-Legacy|V-68887

Vuln-ID|V-213567

PPS9-00-001300 - The EDB Postgres Advanced Server must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-213568r508024_rule

STIG-ID|PPS9-00-001300

STIG-Legacy|SV-83493

STIG-Legacy|V-68889

Vuln-ID|V-213568

PPS9-00-001400 - The EDB Postgres Advanced Server must initiate support of session auditing upon startup.

CCI|CCI-001464

Rule-ID|SV-213569r508024_rule

STIG-ID|PPS9-00-001400

STIG-Legacy|SV-83495

STIG-Legacy|V-68891

Vuln-ID|V-213569

PPS9-00-001600 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish what type of events occurred.

CCI|CCI-000130

Rule-ID|SV-213570r508024_rule

STIG-ID|PPS9-00-001600

STIG-Legacy|SV-83499

STIG-Legacy|V-68895

Vuln-ID|V-213570

PPS9-00-001700 - The EDB Postgres Advanced Server must produce audit records containing time stamps to establish when the events occurred.

CCI|CCI-000131

Rule-ID|SV-213571r508024_rule

STIG-ID|PPS9-00-001700

STIG-Legacy|SV-83501

STIG-Legacy|V-68897

Vuln-ID|V-213571

PPS9-00-001800 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-213572r508024_rule

STIG-ID|PPS9-00-001800

STIG-Legacy|SV-83503

STIG-Legacy|V-68899

Vuln-ID|V-213572

PPS9-00-001900 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the sources (origins) of the events - origins of the events.

CCI|CCI-000133

Rule-ID|SV-213573r508024_rule

STIG-ID|PPS9-00-001900

STIG-Legacy|SV-83505

STIG-Legacy|V-68901

Vuln-ID|V-213573

PPS9-00-002000 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the outcome (success or failure) of the events.

CCI|CCI-000134

Rule-ID|SV-213574r508024_rule

STIG-ID|PPS9-00-002000

STIG-Legacy|SV-83507

STIG-Legacy|V-68903

Vuln-ID|V-213574

PPS9-00-002100 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event.

CCI|CCI-001487

Rule-ID|SV-213575r508024_rule

STIG-ID|PPS9-00-002100

STIG-Legacy|SV-83509

STIG-Legacy|V-68905

Vuln-ID|V-213575

PPS9-00-002200 - The EDB Postgres Advanced Server must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-213576r508024_rule

STIG-ID|PPS9-00-002200

STIG-Legacy|SV-83511

STIG-Legacy|V-68907

Vuln-ID|V-213576

PPS9-00-003210 - EDB Postgres Advanced Server software modules, to include stored procedures, functions and triggers must be monitored to discover unauthorized changes.

CCI|CCI-001499

Rule-ID|SV-213586r508024_rule

STIG-ID|PPS9-00-003210

STIG-Legacy|SV-83531

STIG-Legacy|V-68927

Vuln-ID|V-213586

PPS9-00-003300 - The EDB Postgres Advanced Server software installation account must be restricted to authorized users.

Rule-ID|SV-213587r836838_rule

STIG-ID|PPS9-00-003300

STIG-Legacy|SV-83533

STIG-Legacy|V-68929

Vuln-ID|V-213587

PPS9-00-003500 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be owned by database/EDB Postgres Advanced Server principals authorized for ownership.

Rule-ID|SV-213589r508024_rule

STIG-ID|PPS9-00-003500

STIG-Legacy|SV-83537

STIG-Legacy|V-68933

Vuln-ID|V-213589

PPS9-00-003700 - Default, demonstration and sample databases, database objects, and applications must be removed.

CCI|CCI-000381

Rule-ID|SV-213591r508024_rule

STIG-ID|PPS9-00-003700

STIG-Legacy|SV-83541

STIG-Legacy|V-68937

Vuln-ID|V-213591

PPS9-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments - address

CCI|CCI-000382

Rule-ID|SV-213595r508024_rule

STIG-ID|PPS9-00-004100

STIG-Legacy|SV-83549

STIG-Legacy|V-68945

Vuln-ID|V-213595

PPS9-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments - port

PPS9-00-004300 - If passwords are used for authentication, the EDB Postgres Advanced Server must store only hashed, salted representations of passwords.

CCI|CCI-000196

Rule-ID|SV-213597r836839_rule

STIG-ID|PPS9-00-004300

STIG-Legacy|SV-83551

STIG-Legacy|V-68947

Vuln-ID|V-213597

PPS9-00-004810 - Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

CCI|CCI-000206

Rule-ID|SV-213601r508024_rule

STIG-ID|PPS9-00-004810

STIG-Legacy|SV-83559

STIG-Legacy|V-68955

Vuln-ID|V-213601

PPS9-00-004820 - When using command-line tools such as psql, users must use a logon method that does not expose the password.

Rule-ID|SV-213602r508024_rule

STIG-ID|PPS9-00-004820

STIG-Legacy|SV-83561

STIG-Legacy|V-68957

Vuln-ID|V-213602

PPS9-00-005800 - The EDB Postgres Advanced Server must isolate security functions from non-security functions.

CCI|CCI-001084

Rule-ID|SV-213605r508024_rule

STIG-ID|PPS9-00-005800

STIG-Legacy|SV-83567

STIG-Legacy|V-68963

Vuln-ID|V-213605

PPS9-00-005900 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

CCI|CCI-001090

Rule-ID|SV-213606r508024_rule

STIG-ID|PPS9-00-005900

STIG-Legacy|SV-83569

STIG-Legacy|V-68965

Vuln-ID|V-213606

PPS9-00-006200 - The EDB Postgres Advanced Server must check the validity of all data inputs except those specifically identified by the organization.

CCI|CCI-001310

Rule-ID|SV-213608r508024_rule

STIG-ID|PPS9-00-006200

STIG-Legacy|SV-83573

STIG-Legacy|V-68969

Vuln-ID|V-213608

PPS9-00-006300 - The EDB Postgres Advanced Server and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-213609r508024_rule

STIG-ID|PPS9-00-006300

STIG-Legacy|SV-83575

STIG-Legacy|V-68971

Vuln-ID|V-213609

PPS9-00-006400 - The EDB Postgres Advanced Server and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-213610r508024_rule

STIG-ID|PPS9-00-006400

STIG-Legacy|SV-83577

STIG-Legacy|V-68973

Vuln-ID|V-213610

PPS9-00-006500 - The EDB Postgres Advanced Server must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

CCI|CCI-001312

Rule-ID|SV-213611r508024_rule

STIG-ID|PPS9-00-006500

STIG-Legacy|SV-83579

STIG-Legacy|V-68975

Vuln-ID|V-213611

PPS9-00-006600 - The EDB Postgres Advanced Server must reveal detailed error messages only to the ISSO, ISSM, SA and DBA.

CCI|CCI-001314

Rule-ID|SV-213612r508024_rule

STIG-ID|PPS9-00-006600

STIG-Legacy|SV-83581

STIG-Legacy|V-68977

Vuln-ID|V-213612

Detections

Analytics

EDB PostgreSQL Advanced Server DB Audit v2r2

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Jun 17, 2024 Miscellaneous Metadata updated.
Revision 1.1 May 15, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.

Detections

Analytics

EDB PostgreSQL Advanced Server DB Audit v2r2 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

EDB PostgreSQL Advanced Server DB Audit v2r2