EPAS-00-000100 - The EDB Postgres Advanced Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-259210r960735_rule

STIG-ID|EPAS-00-000100

Vuln-ID|V-259210

EPAS-00-000900 - The EDB Postgres Advanced Server must protect against a user falsely repudiating having performed organization-defined actions.

800-53|AU-10

CCI|CCI-000166

Rule-ID|SV-259213r960864_rule

STIG-ID|EPAS-00-000900

Vuln-ID|V-259213

EPAS-00-001000 - The EDB Postgres Advanced Server must provide audit record generation capability for DOD-defined auditable events within all EDB Postgres Advanced Server/database components.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-259214r960879_rule

STIG-ID|EPAS-00-001000

Vuln-ID|V-259214

EPAS-00-001200 - The EDB Postgres Advanced Server must generate audit records when privileges/permissions are retrieved.

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-259216r960885_rule

STIG-ID|EPAS-00-001200

Vuln-ID|V-259216

EPAS-00-001300 - The EDB Postgres Advanced Server must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-259217r960885_rule

STIG-ID|EPAS-00-001300

Vuln-ID|V-259217

EPAS-00-001400 - The EDB Postgres Advanced Server must initiate support of session auditing upon startup.

800-53|AU-14(1)

CCI|CCI-001464

Rule-ID|SV-259218r960888_rule

STIG-ID|EPAS-00-001400

Vuln-ID|V-259218

EPAS-00-001600 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish what type of events occurred.

800-53|AU-3

CCI|CCI-000130

Rule-ID|SV-259219r960891_rule

STIG-ID|EPAS-00-001600

Vuln-ID|V-259219

EPAS-00-001700 - The EDB Postgres Advanced Server must produce audit records containing time stamps to establish when the events occurred.

CCI|CCI-000131

Rule-ID|SV-259220r960894_rule

STIG-ID|EPAS-00-001700

Vuln-ID|V-259220

EPAS-00-001800 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-259221r960897_rule

STIG-ID|EPAS-00-001800

Vuln-ID|V-259221

EPAS-00-001900 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the sources (origins) of the events.

CCI|CCI-000133

Rule-ID|SV-259222r960900_rule

STIG-ID|EPAS-00-001900

Vuln-ID|V-259222

EPAS-00-002000 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the outcome (success or failure) of the events.

CCI|CCI-000134

Rule-ID|SV-259223r960903_rule

STIG-ID|EPAS-00-002000

Vuln-ID|V-259223

EPAS-00-002100 - The EDB Postgres Advanced Server must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event.

CCI|CCI-001487

Rule-ID|SV-259224r960906_rule

STIG-ID|EPAS-00-002100

Vuln-ID|V-259224

EPAS-00-002200 - The EDB Postgres Advanced Server must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

800-53|AU-3(1)

CCI|CCI-000135

Rule-ID|SV-259225r960909_rule

STIG-ID|EPAS-00-002200

Vuln-ID|V-259225

EPAS-00-003210 - EDB Postgres Advanced Server software modules, to include stored procedures, functions, and triggers must be monitored to discover unauthorized changes.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-259235r960960_rule

STIG-ID|EPAS-00-003210

Vuln-ID|V-259235

EPAS-00-003300 - The EDB Postgres Advanced Server software installation account must be restricted to authorized users.

CAT|I

Rule-ID|SV-259236r960960_rule

STIG-ID|EPAS-00-003300

Vuln-ID|V-259236

EPAS-00-003500 - Database objects must be owned by database/EDB Postgres Advanced Server principals authorized for ownership.

Rule-ID|SV-259238r960960_rule

STIG-ID|EPAS-00-003500

Vuln-ID|V-259238

EPAS-00-003700 - Default, demonstration and sample databases, database objects, and applications must be removed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-259240r960963_rule

STIG-ID|EPAS-00-003700

Vuln-ID|V-259240

EPAS-00-004100 - The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-259244r960966_rule

STIG-ID|EPAS-00-004100

Vuln-ID|V-259244

EPAS-00-004250 - If DBMS authentication, using passwords, is employed, EDB Postgres Advanced Server must enforce the DOD standards for password complexity and lifetime.

800-53|IA-5(1)(a)

CCI|CCI-004066

Rule-ID|SV-259246r998212_rule

STIG-ID|EPAS-00-004250

Vuln-ID|V-259246

EPAS-00-004300 - If passwords are used for authentication, the EDB Postgres Advanced Server must store only hashed, salted representations of passwords.

800-53|IA-5(1)(d)

CCI|CCI-004062

Rule-ID|SV-259247r998215_rule

STIG-ID|EPAS-00-004300

Vuln-ID|V-259247

EPAS-00-004800 - When using command-line tools such as psql, users must use a logon method that does not expose the password.

800-53|IA-6

CCI|CCI-000206

Rule-ID|SV-259252r961047_rule

STIG-ID|EPAS-00-004800

Vuln-ID|V-259252

EPAS-00-004810 - Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

Rule-ID|SV-259253r961047_rule

STIG-ID|EPAS-00-004810

Vuln-ID|V-259253

EPAS-00-005200 - The EDB Postgres Advanced Server must invalidate session identifiers upon user logout or other session termination.

800-53|SC-23(1)

CCI|CCI-001185

Rule-ID|SV-259258r961113_rule

STIG-ID|EPAS-00-005200

Vuln-ID|V-259258

EPAS-00-005700 - The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-259259r961128_rule

STIG-ID|EPAS-00-005700

Vuln-ID|V-259259

EPAS-00-005800 - The EDB Postgres Advanced Server must isolate security functions from nonsecurity functions.

800-53|SC-3

CCI|CCI-001084

Rule-ID|SV-259260r961131_rule

STIG-ID|EPAS-00-005800

Vuln-ID|V-259260

EPAS-00-005900 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data transfer policy.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-259261r961149_rule

STIG-ID|EPAS-00-005900

Vuln-ID|V-259261

EPAS-00-006200 - The EDB Postgres Advanced Server must check the validity of all data inputs except those specifically identified by the organization.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-259263r961158_rule

STIG-ID|EPAS-00-006200

Vuln-ID|V-259263

EPAS-00-006300 - The EDB Postgres Advanced Server and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-259264r961158_rule

STIG-ID|EPAS-00-006300

Vuln-ID|V-259264

EPAS-00-006400 - The EDB Postgres Advanced Server and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-259265r961158_rule

STIG-ID|EPAS-00-006400

Vuln-ID|V-259265

EPAS-00-006500 - The EDB Postgres Advanced Server must provide nonprivileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

800-53|SI-11a.

CCI|CCI-001312

Rule-ID|SV-259266r961167_rule

STIG-ID|EPAS-00-006500

Vuln-ID|V-259266

EPAS-00-006600 - The EDB Postgres Advanced Server must reveal detailed error messages only to the ISSO, ISSM, SA, and DBA.

800-53|SI-11b.

CCI|CCI-001314

Rule-ID|SV-259267r961170_rule

STIG-ID|EPAS-00-006600

Vuln-ID|V-259267

EPAS-00-006700 - The EDB Postgres Advanced Server must automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.

800-53|AC-12

CCI|CCI-002361

Rule-ID|SV-259268r961221_rule

STIG-ID|EPAS-00-006700

Vuln-ID|V-259268

EPAS-00-006900 - The EDB Postgres Advanced Server must associate organization-defined types of security labels having organization-defined security label values with information in storage.

800-53|AC-16a.

CCI|CCI-002262

Rule-ID|SV-259269r961269_rule

STIG-ID|EPAS-00-006900

Vuln-ID|V-259269

EPAS-00-007000 - The EDB Postgres Advanced Server must associate organization-defined types of security labels having organization-defined security label values with information in process.

CCI|CCI-002263

Rule-ID|SV-259270r961272_rule

STIG-ID|EPAS-00-007000

Vuln-ID|V-259270

EPAS-00-007100 - The EDB Postgres Advanced Server must associate organization-defined types of security labels having organization-defined security label values with information in transmission.

CCI|CCI-002264

Rule-ID|SV-259271r961275_rule

STIG-ID|EPAS-00-007100

Vuln-ID|V-259271

EPAS-00-007500 - Execution of software modules (to include stored procedures, functions, and triggers) with elevated privileges must be restricted to necessary cases only.

800-53|AC-6(8)

CCI|CCI-002233

Rule-ID|SV-259274r961359_rule

STIG-ID|EPAS-00-007500

Vuln-ID|V-259274

EPAS-00-007510 - Execution of software modules (to include stored procedures, functions, and triggers) with elevated privileges must be restricted to necessary cases only.

Rule-ID|SV-259275r961359_rule

Detections

Analytics

EnterpriseDB PostgreSQL Advanced Server DB v2r1

Audit Details

File Details

Audit Changelog

No revisions found