EPAS-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

CAT|II

CCI|CCI-000054

Rule-ID|SV-259210r938683_rule

STIG-ID|EPAS-00-000100

Vuln-ID|V-259210

EPAS-00-000900 - The EDB Postgres Advanced Server must protect against a user falsely repudiating having performed organization-defined actions.

CCI|CCI-000166

Rule-ID|SV-259213r938692_rule

STIG-ID|EPAS-00-000900

Vuln-ID|V-259213

EPAS-00-001000 - The EDB Postgres Advanced Server must provide audit record generation capability for DOD-defined auditable events within all EDB Postgres Advanced Server/database components.

CCI|CCI-000169

Rule-ID|SV-259214r938695_rule

STIG-ID|EPAS-00-001000

Vuln-ID|V-259214

EPAS-00-001200 - The EDB Postgres Advanced Server must generate audit records when privileges/permissions are retrieved.

CCI|CCI-000172

Rule-ID|SV-259216r938701_rule

STIG-ID|EPAS-00-001200

Vuln-ID|V-259216

EPAS-00-001300 - The EDB Postgres Advanced Server must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-259217r938704_rule

STIG-ID|EPAS-00-001300

Vuln-ID|V-259217

EPAS-00-001400 - The EDB Postgres Advanced Server must initiate support of session auditing upon startup.

CCI|CCI-001464

Rule-ID|SV-259218r938707_rule

STIG-ID|EPAS-00-001400

Vuln-ID|V-259218

EPAS-00-001600 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish what type of events occurred.

CCI|CCI-000130

Rule-ID|SV-259219r938710_rule

STIG-ID|EPAS-00-001600

Vuln-ID|V-259219

EPAS-00-001700 - The EDB Postgres Advanced Server must produce audit records containing time stamps to establish when the events occurred.

CCI|CCI-000131

Rule-ID|SV-259220r938713_rule

STIG-ID|EPAS-00-001700

Vuln-ID|V-259220

EPAS-00-001800 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-259221r938716_rule

STIG-ID|EPAS-00-001800

Vuln-ID|V-259221

EPAS-00-001900 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the sources (origins) of the events.

CCI|CCI-000133

Rule-ID|SV-259222r938719_rule

STIG-ID|EPAS-00-001900

Vuln-ID|V-259222

EPAS-00-002000 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the outcome (success or failure) of the events.

CCI|CCI-000134

Rule-ID|SV-259223r938722_rule

STIG-ID|EPAS-00-002000

Vuln-ID|V-259223

EPAS-00-002100 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event.

CCI|CCI-001487

Rule-ID|SV-259224r938725_rule

STIG-ID|EPAS-00-002100

Vuln-ID|V-259224

EPAS-00-002200 - The EDB Postgres Advanced Server must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-259225r938728_rule

STIG-ID|EPAS-00-002200

Vuln-ID|V-259225

EPAS-00-003210 - EDB Postgres Advanced Server software modules, to include stored procedures, functions, and triggers must be monitored to discover unauthorized changes.

CCI|CCI-001499

Rule-ID|SV-259235r938758_rule

STIG-ID|EPAS-00-003210

Vuln-ID|V-259235

EPAS-00-003300 - The EDB Postgres Advanced Server software installation account must be restricted to authorized users.

CAT|I

Rule-ID|SV-259236r938761_rule

STIG-ID|EPAS-00-003300

Vuln-ID|V-259236

EPAS-00-003500 - Database objects must be owned by database/EDB Postgres Advanced Server principals authorized for ownership.

Rule-ID|SV-259238r938767_rule

STIG-ID|EPAS-00-003500

Vuln-ID|V-259238

EPAS-00-003700 - Default, demonstration and sample databases, database objects, and applications must be removed.

CCI|CCI-000381

Rule-ID|SV-259240r938773_rule

STIG-ID|EPAS-00-003700

Vuln-ID|V-259240

EPAS-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

CCI|CCI-000382

Rule-ID|SV-259244r938785_rule

STIG-ID|EPAS-00-004100

Vuln-ID|V-259244

EPAS-00-004250 - If DBMS authentication, using passwords, is employed, EDB Postgres Advanced Server must enforce the DOD standards for password complexity and lifetime.

CCI|CCI-000192

Rule-ID|SV-259246r938791_rule

STIG-ID|EPAS-00-004250

Vuln-ID|V-259246

EPAS-00-004300 - If passwords are used for authentication, the EDB Postgres Advanced Server must store only hashed, salted representations of passwords.

CCI|CCI-000196

Rule-ID|SV-259247r938794_rule

STIG-ID|EPAS-00-004300

Vuln-ID|V-259247

EPAS-00-004800 - When using command-line tools such as psql, users must use a logon method that does not expose the password.

CCI|CCI-000206

Rule-ID|SV-259252r938809_rule

STIG-ID|EPAS-00-004800

Vuln-ID|V-259252

EPAS-00-004810 - Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

Rule-ID|SV-259253r938812_rule

STIG-ID|EPAS-00-004810

Vuln-ID|V-259253

EPAS-00-005200 - The EDB Postgres Advanced Server must invalidate session identifiers upon user logout or other session termination.

CCI|CCI-001185

Rule-ID|SV-259258r938827_rule

STIG-ID|EPAS-00-005200

Vuln-ID|V-259258

EPAS-00-005700 - The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.

CCI|CCI-001199

Rule-ID|SV-259259r938830_rule

STIG-ID|EPAS-00-005700

Vuln-ID|V-259259

EPAS-00-005800 - The EDB Postgres Advanced Server must isolate security functions from nonsecurity functions.

CCI|CCI-001084

Rule-ID|SV-259260r938833_rule

STIG-ID|EPAS-00-005800

Vuln-ID|V-259260

EPAS-00-005900 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data transfer policy.

CCI|CCI-001090

Rule-ID|SV-259261r938836_rule

STIG-ID|EPAS-00-005900

Vuln-ID|V-259261

EPAS-00-006200 - The EDB Postgres Advanced Server must check the validity of all data inputs except those specifically identified by the organization.

CCI|CCI-001310

Rule-ID|SV-259263r938842_rule

STIG-ID|EPAS-00-006200

Vuln-ID|V-259263

EPAS-00-006300 - The EDB Postgres Advanced Server and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-259264r938845_rule

STIG-ID|EPAS-00-006300

Vuln-ID|V-259264

EPAS-00-006400 - The EDB Postgres Advanced Server and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-259265r938848_rule

STIG-ID|EPAS-00-006400

Vuln-ID|V-259265

EPAS-00-006500 - The EDB Postgres Advanced Server must provide nonprivileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

CCI|CCI-001312

Rule-ID|SV-259266r938851_rule

STIG-ID|EPAS-00-006500

Vuln-ID|V-259266

EPAS-00-006600 - The EDB Postgres Advanced Server must reveal detailed error messages only to the ISSO, ISSM, SA, and DBA.

CCI|CCI-001314

Rule-ID|SV-259267r938854_rule

STIG-ID|EPAS-00-006600

Vuln-ID|V-259267

EPAS-00-006700 - The EDB Postgres Advanced Server must automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.

CCI|CCI-002361

Rule-ID|SV-259268r938857_rule

STIG-ID|EPAS-00-006700

Vuln-ID|V-259268

EPAS-00-006900 - The EDB Postgres Advanced Server must associate organization-defined types of security labels having organization-defined security label values with information in storage.

CCI|CCI-002262

Rule-ID|SV-259269r938860_rule

STIG-ID|EPAS-00-006900

Vuln-ID|V-259269

EPAS-00-007000 - The EDB Postgres Advanced Server must associate organization-defined types of security labels having organization-defined security label values with information in process.

CCI|CCI-002263

Rule-ID|SV-259270r938863_rule

STIG-ID|EPAS-00-007000

Vuln-ID|V-259270

EPAS-00-007100 - The EDB Postgres Advanced Server must associate organization-defined types of security labels having organization-defined security label values with information in transmission.

CCI|CCI-002264

Rule-ID|SV-259271r938866_rule

STIG-ID|EPAS-00-007100

Vuln-ID|V-259271

EPAS-00-007500 - Execution of software modules (to include stored procedures, functions, and triggers) with elevated privileges must be restricted to necessary cases only.

CCI|CCI-002233

Rule-ID|SV-259274r938875_rule

STIG-ID|EPAS-00-007500

Vuln-ID|V-259274

EPAS-00-007510 - Execution of software modules (to include stored procedures, functions, and triggers) with elevated privileges must be restricted to necessary cases only.

Rule-ID|SV-259275r938878_rule

STIG-ID|EPAS-00-007510

Vuln-ID|V-259275

EPAS-00-007700 - The EDB Postgres Advanced Server must utilize centralized management of the content captured in audit records generated by all components of the EDB Postgres Advanced Server.

CCI|CCI-001844

Rule-ID|SV-259276r938881_rule

STIG-ID|EPAS-00-007700

Vuln-ID|V-259276

EPAS-00-007800 - The EDB Postgres Advanced Server must provide centralized configuration of the content to be captured in audit records generated by all components of the EDB Postgres Advanced Server.

Rule-ID|SV-259277r938884_rule

STIG-ID|EPAS-00-007800

Vuln-ID|V-259277

EPAS-00-007900 - The EDB Postgres Advanced Server must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

CCI|CCI-001849

Rule-ID|SV-259278r938887_rule

STIG-ID|EPAS-00-007900

Vuln-ID|V-259278

EPAS-00-008000 - The EDB Postgres Advanced Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

CCI|CCI-001855

Rule-ID|SV-259279r938890_rule

STIG-ID|EPAS-00-008000

Vuln-ID|V-259279

EPAS-00-008100 - The EDB Postgres Advanced Server must provide an immediate real-time alert to appropriate support staff of all audit log failures.

Detections

Analytics

EnterpriseDB PostgreSQL Advanced Server DB v1r1

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Aug 28, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.1 Jun 17, 2024 Miscellaneous Metadata updated.

Detections

Analytics

EnterpriseDB PostgreSQL Advanced Server DB v1r1 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

EnterpriseDB PostgreSQL Advanced Server DB v1r1