DISA_STIG_MariaDB_Enterprise_10.x_v1r3_OS_Linux.audit from DISA MariaDB Enterprise 10.x v1r3 STIG

MADB-10-004400 - MariaDB must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations.

800-53|IA-7

CAT|I

CCI|CCI-000803

Rule-ID|SV-253703r879616_rule

STIG-ID|MADB-10-004400

Vuln-ID|V-253703

MADB-10-008500 - MariaDB must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

800-53|SC-23(5)

CAT|II

CCI|CCI-002470

Rule-ID|SV-253738r879798_rule

STIG-ID|MADB-10-008500

Vuln-ID|V-253738

MADB-10-009200 - When updates are applied to the MariaDB software, any software components that have been replaced or made unnecessary must be removed.

800-53|SI-2(6)

CCI|CCI-002617

Rule-ID|SV-253744r879825_rule

STIG-ID|MADB-10-009200

Vuln-ID|V-253744

MADB-10-009300 - Security-relevant software updates to MariaDB must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

800-53|SI-2c.

CCI|CCI-002605

Rule-ID|SV-253745r879827_rule

STIG-ID|MADB-10-009300

Vuln-ID|V-253745

MADB-10-012100 - MariaDB must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures.

800-53|SC-13

CCI|CCI-002450

Rule-ID|SV-253773r879885_rule

STIG-ID|MADB-10-012100

Vuln-ID|V-253773

MADB-10-012200 - MariaDB must implement NIST FIPS 140-2 validated cryptographic modules to generate and validate cryptographic hashes.

Rule-ID|SV-253774r879885_rule

STIG-ID|MADB-10-012200

Vuln-ID|V-253774

MADB-10-012300 - MariaDB must implement NIST FIPS 140-2 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the data owners requirements.

Rule-ID|SV-253775r879885_rule

STIG-ID|MADB-10-012300

Vuln-ID|V-253775

Detections

Analytics

DISA MariaDB Enterprise 10.x v1r3 OS Linux

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous