PPS9-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-213561r879511_rule

STIG-ID|PPS9-00-000100

STIG-Legacy|SV-83479

STIG-Legacy|V-68875

Vuln-ID|V-213561

PPS9-00-000800 - The EDB Postgres Advanced Server must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

800-53|AC-3

CAT|I

CCI|CCI-000213

Rule-ID|SV-213563r879530_rule

STIG-ID|PPS9-00-000800

STIG-Legacy|SV-83483

STIG-Legacy|V-68879

Vuln-ID|V-213563

PPS9-00-000900 - The EDB Postgres Advanced Server must protect against a user falsely repudiating having performed organization-defined actions.

800-53|AU-10

CCI|CCI-000166

Rule-ID|SV-213564r879554_rule

STIG-ID|PPS9-00-000900

STIG-Legacy|SV-83485

STIG-Legacy|V-68881

Vuln-ID|V-213564

PPS9-00-001000 - The EDB Postgres Advanced Server must provide audit record generation capability for DoD-defined auditable events within all EDB Postgres Advanced Server/database components.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-213565r879559_rule

STIG-ID|PPS9-00-001000

STIG-Legacy|SV-83487

STIG-Legacy|V-68883

Vuln-ID|V-213565

PPS9-00-001200 - The EDB Postgres Advanced Server must generate audit records when privileges/permissions are retrieved.

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-213567r879561_rule

STIG-ID|PPS9-00-001200

STIG-Legacy|SV-83491

STIG-Legacy|V-68887

Vuln-ID|V-213567

PPS9-00-001300 - The EDB Postgres Advanced Server must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-213568r879561_rule

STIG-ID|PPS9-00-001300

STIG-Legacy|SV-83493

STIG-Legacy|V-68889

Vuln-ID|V-213568

PPS9-00-001400 - The EDB Postgres Advanced Server must initiate support of session auditing upon startup.

800-53|AU-14(1)

CCI|CCI-001464

Rule-ID|SV-213569r879562_rule

STIG-ID|PPS9-00-001400

STIG-Legacy|SV-83495

STIG-Legacy|V-68891

Vuln-ID|V-213569

PPS9-00-001600 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish what type of events occurred.

800-53|AU-3

CCI|CCI-000130

Rule-ID|SV-213570r879563_rule

STIG-ID|PPS9-00-001600

STIG-Legacy|SV-83499

STIG-Legacy|V-68895

Vuln-ID|V-213570

PPS9-00-001700 - The EDB Postgres Advanced Server must produce audit records containing time stamps to establish when the events occurred.

CCI|CCI-000131

Rule-ID|SV-213571r879564_rule

STIG-ID|PPS9-00-001700

STIG-Legacy|SV-83501

STIG-Legacy|V-68897

Vuln-ID|V-213571

PPS9-00-001800 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-213572r879565_rule

STIG-ID|PPS9-00-001800

STIG-Legacy|SV-83503

STIG-Legacy|V-68899

Vuln-ID|V-213572

PPS9-00-001900 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the sources (origins) of the events - origins of the events.

CCI|CCI-000133

Rule-ID|SV-213573r879566_rule

STIG-ID|PPS9-00-001900

STIG-Legacy|SV-83505

STIG-Legacy|V-68901

Vuln-ID|V-213573

PPS9-00-002000 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the outcome (success or failure) of the events.

CCI|CCI-000134

Rule-ID|SV-213574r879567_rule

STIG-ID|PPS9-00-002000

STIG-Legacy|SV-83507

STIG-Legacy|V-68903

Vuln-ID|V-213574

PPS9-00-002100 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event.

CCI|CCI-001487

Rule-ID|SV-213575r879568_rule

STIG-ID|PPS9-00-002100

STIG-Legacy|SV-83509

STIG-Legacy|V-68905

Vuln-ID|V-213575

PPS9-00-002200 - The EDB Postgres Advanced Server must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

800-53|AU-3(1)

CCI|CCI-000135

Rule-ID|SV-213576r879569_rule

STIG-ID|PPS9-00-002200

STIG-Legacy|SV-83511

STIG-Legacy|V-68907

Vuln-ID|V-213576

PPS9-00-003210 - EDB Postgres Advanced Server software modules, to include stored procedures, functions and triggers must be monitored to discover unauthorized changes.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-213586r879586_rule

STIG-ID|PPS9-00-003210

STIG-Legacy|SV-83531

STIG-Legacy|V-68927

Vuln-ID|V-213586

PPS9-00-003300 - The EDB Postgres Advanced Server software installation account must be restricted to authorized users.

Rule-ID|SV-213587r879586_rule

STIG-ID|PPS9-00-003300

STIG-Legacy|SV-83533

STIG-Legacy|V-68929

Vuln-ID|V-213587

PPS9-00-003500 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be owned by database/EDB Postgres Advanced Server principals authorized for ownership.

Rule-ID|SV-213589r879586_rule

STIG-ID|PPS9-00-003500

STIG-Legacy|SV-83537

STIG-Legacy|V-68933

Vuln-ID|V-213589

PPS9-00-003700 - Default, demonstration and sample databases, database objects, and applications must be removed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-213591r879587_rule

STIG-ID|PPS9-00-003700

STIG-Legacy|SV-83541

STIG-Legacy|V-68937

Vuln-ID|V-213591

PPS9-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-213595r879588_rule

STIG-ID|PPS9-00-004100

STIG-Legacy|SV-83549

STIG-Legacy|V-68945

Vuln-ID|V-213595

PPS9-00-004300 - If passwords are used for authentication, the EDB Postgres Advanced Server must store only hashed, salted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000196

Rule-ID|SV-213597r879608_rule

STIG-ID|PPS9-00-004300

STIG-Legacy|SV-83551

STIG-Legacy|V-68947

Vuln-ID|V-213597

PPS9-00-004810 - Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

800-53|IA-6

CCI|CCI-000206

Rule-ID|SV-213601r879615_rule

STIG-ID|PPS9-00-004810

STIG-Legacy|SV-83559

STIG-Legacy|V-68955

Vuln-ID|V-213601

PPS9-00-004820 - When using command-line tools such as psql, users must use a logon method that does not expose the password.

Rule-ID|SV-213602r879615_rule

STIG-ID|PPS9-00-004820

STIG-Legacy|SV-83561

STIG-Legacy|V-68957

Vuln-ID|V-213602

PPS9-00-005800 - The EDB Postgres Advanced Server must isolate security functions from non-security functions.

800-53|SC-3

CCI|CCI-001084

Rule-ID|SV-213605r879643_rule

STIG-ID|PPS9-00-005800

STIG-Legacy|SV-83567

STIG-Legacy|V-68963

Vuln-ID|V-213605

PPS9-00-005900 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-213606r879649_rule

STIG-ID|PPS9-00-005900

STIG-Legacy|SV-83569

STIG-Legacy|V-68965

Vuln-ID|V-213606

PPS9-00-006200 - The EDB Postgres Advanced Server must check the validity of all data inputs except those specifically identified by the organization.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-213608r879652_rule

STIG-ID|PPS9-00-006200

STIG-Legacy|SV-83573

STIG-Legacy|V-68969

Vuln-ID|V-213608

PPS9-00-006300 - The EDB Postgres Advanced Server and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-213609r879652_rule

STIG-ID|PPS9-00-006300

STIG-Legacy|SV-83575

STIG-Legacy|V-68971

Vuln-ID|V-213609

PPS9-00-006400 - The EDB Postgres Advanced Server and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-213610r879652_rule

STIG-ID|PPS9-00-006400

STIG-Legacy|SV-83577

STIG-Legacy|V-68973

Vuln-ID|V-213610

Detections

Analytics

EDB PostgreSQL Advanced Server DB Audit v2r3

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous