DISA_STIG_Oracle_Database_11.2g_v2r3_DB.audit from DISA Oracle Database 11.2g v2r3 STIG

O112-BP-021200 - Access to default accounts used to support replication must be restricted to authorized DBAs.

CAT|II

CCI|CCI-000366

Rule-ID|SV-219695r401224_rule

STIG-ID|O112-BP-021200

STIG-Legacy|SV-68201

STIG-Legacy|V-53961

Vuln-ID|V-219695

O112-BP-021300 - Oracle instance names must not contain Oracle version numbers.

Rule-ID|SV-219696r401224_rule

STIG-ID|O112-BP-021300

STIG-Legacy|SV-68203

STIG-Legacy|V-53963

Vuln-ID|V-219696

O112-BP-021400 - Fixed user and public database links must be authorized for use - 'DB Links'

Rule-ID|SV-219697r401224_rule

STIG-ID|O112-BP-021400

STIG-Legacy|SV-68205

STIG-Legacy|V-53965

Vuln-ID|V-219697

O112-BP-021400 - Fixed user and public database links must be authorized for use - 'repcatlog count = 0'

O112-BP-021500 - A minimum of two Oracle control files must be defined and configured to be stored on separate, archived disks (physical or virtual) or archived partitions on a RAID device.

CAT|III

Rule-ID|SV-219698r401224_rule

STIG-ID|O112-BP-021500

STIG-Legacy|SV-68207

STIG-Legacy|V-53967

Vuln-ID|V-219698

O112-BP-021600 - A minimum of two Oracle redo log groups/files must be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device - V$LOG count

Rule-ID|SV-219699r401224_rule

STIG-ID|O112-BP-021600

STIG-Legacy|SV-68209

STIG-Legacy|V-53969

Vuln-ID|V-219699

O112-BP-021600 - A minimum of two Oracle redo log groups/files must be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device - V$LOG members count

O112-BP-021700 - The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA or non-Application administrator user accounts.

Rule-ID|SV-219700r401224_rule

STIG-ID|O112-BP-021700

STIG-Legacy|SV-68211

STIG-Legacy|V-53971

Vuln-ID|V-219700

O112-BP-021800 - Execute permission must be revoked from PUBLIC for restricted Oracle packages.

Rule-ID|SV-219701r401224_rule

STIG-ID|O112-BP-021800

STIG-Legacy|SV-68213

STIG-Legacy|V-53973

Vuln-ID|V-219701

O112-BP-021900 - The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.

CAT|I

Rule-ID|SV-219702r401224_rule

STIG-ID|O112-BP-021900

STIG-Legacy|SV-68215

STIG-Legacy|V-53975

Vuln-ID|V-219702

O112-BP-022000 - The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.

Rule-ID|SV-219703r401224_rule

STIG-ID|O112-BP-022000

STIG-Legacy|SV-68217

STIG-Legacy|V-53977

Vuln-ID|V-219703

O112-BP-022100 - The Oracle SQL92_SECURITY parameter must be set to TRUE.

Rule-ID|SV-219704r401224_rule

STIG-ID|O112-BP-022100

STIG-Legacy|SV-68219

STIG-Legacy|V-53979

Vuln-ID|V-219704

O112-BP-022200 - The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.

Rule-ID|SV-219705r401224_rule

STIG-ID|O112-BP-022200

STIG-Legacy|SV-68221

STIG-Legacy|V-53981

Vuln-ID|V-219705

O112-BP-022300 - System privileges granted using the WITH ADMIN OPTION must not be granted to unauthorized user accounts.

Rule-ID|SV-219706r401224_rule

STIG-ID|O112-BP-022300

STIG-Legacy|SV-68223

STIG-Legacy|V-53983

Vuln-ID|V-219706

O112-BP-022400 - System Privileges must not be granted to PUBLIC.

Rule-ID|SV-219707r401224_rule

STIG-ID|O112-BP-022400

STIG-Legacy|SV-68225

STIG-Legacy|V-53985

Vuln-ID|V-219707

O112-BP-022500 - Oracle roles granted using the WITH ADMIN OPTION must not be granted to unauthorized accounts.

Rule-ID|SV-219708r401224_rule

STIG-ID|O112-BP-022500

STIG-Legacy|SV-68227

STIG-Legacy|V-53987

Vuln-ID|V-219708

O112-BP-022600 - Object permissions granted to PUBLIC must be restricted.

Rule-ID|SV-219709r401224_rule

STIG-ID|O112-BP-022600

STIG-Legacy|SV-68229

STIG-Legacy|V-53989

Vuln-ID|V-219709

O112-BP-022800 - Application role permissions must not be assigned to the Oracle PUBLIC role.

Rule-ID|SV-219711r401224_rule

STIG-ID|O112-BP-022800

STIG-Legacy|SV-68233

STIG-Legacy|V-53993

Vuln-ID|V-219711

O112-BP-022900 - Oracle application administration roles must be disabled if not required and authorized.

Rule-ID|SV-219712r401224_rule

STIG-ID|O112-BP-022900

STIG-Legacy|SV-68235

STIG-Legacy|V-53995

Vuln-ID|V-219712

O112-BP-023000 - Connections by mid-tier web and application systems to the Oracle DBMS from a DMZ or external network must be encrypted.

Rule-ID|SV-219713r401224_rule

STIG-ID|O112-BP-023000

STIG-Legacy|SV-68237

STIG-Legacy|V-53997

Vuln-ID|V-219713

O112-BP-023100 - Database job/batch queues must be reviewed regularly to detect unauthorized database job submissions - job_queue_processes

Rule-ID|SV-219714r401224_rule

STIG-ID|O112-BP-023100

STIG-Legacy|SV-68239

STIG-Legacy|V-53999

Vuln-ID|V-219714

O112-BP-023100 - Database job/batch queues must be reviewed regularly to detect unauthorized database job submissions - MAX_JOB_SLAVE_PROCESSES

O112-BP-023200 - Unauthorized database links must not be defined and active.

Rule-ID|SV-219715r401224_rule

STIG-ID|O112-BP-023200

STIG-Legacy|SV-68241

STIG-Legacy|V-54001

Vuln-ID|V-219715

O112-BP-023300 - Sensitive information from production database exports must be modified before being imported into a development database.

Rule-ID|SV-219716r401224_rule

STIG-ID|O112-BP-023300

STIG-Legacy|SV-68243

STIG-Legacy|V-54003

Vuln-ID|V-219716

O112-BP-023600 - Only authorized system accounts must have the SYSTEM tablespace specified as the default tablespace - default tablespace

Rule-ID|SV-219719r401224_rule

STIG-ID|O112-BP-023600

STIG-Legacy|SV-68249

STIG-Legacy|V-54009

Vuln-ID|V-219719

O112-BP-023600 - Only authorized system accounts must have the SYSTEM tablespace specified as the default tablespace - non-default account records

O112-BP-023700 - Application owner accounts must have a dedicated application tablespace.

Rule-ID|SV-219720r401224_rule

STIG-ID|O112-BP-023700

STIG-Legacy|SV-68251

STIG-Legacy|V-54011

Vuln-ID|V-219720

O112-BP-023800 - The directories assigned to the LOG_ARCHIVE_DEST* parameters must be protected from unauthorized access.

Rule-ID|SV-219721r401224_rule

STIG-ID|O112-BP-023800

STIG-Legacy|SV-68253

STIG-Legacy|V-54013

Vuln-ID|V-219721

O112-BP-023900 - The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to FALSE.

Rule-ID|SV-219722r401224_rule

STIG-ID|O112-BP-023900

STIG-Legacy|SV-68255

STIG-Legacy|V-54015

Vuln-ID|V-219722

O112-BP-024000 - Application object owner accounts must be disabled when not performing installation or maintenance actions - dba roles

Rule-ID|SV-219723r401224_rule

STIG-ID|O112-BP-024000

STIG-Legacy|SV-68257

STIG-Legacy|V-54017

Vuln-ID|V-219723

O112-BP-024000 - Application object owner accounts must be disabled when not performing installation or maintenance actions - locked roles

O112-BP-024100 - DBMS production application and data directories must be protected from developers on shared production/development DBMS host systems.

Rule-ID|SV-219724r401224_rule

STIG-ID|O112-BP-024100

STIG-Legacy|SV-68259

STIG-Legacy|V-54019

Vuln-ID|V-219724

O112-BP-024200 - Use of the DBMS installation account must be logged.

Rule-ID|SV-219725r401224_rule

STIG-ID|O112-BP-024200

STIG-Legacy|SV-68261

STIG-Legacy|V-54021

Vuln-ID|V-219725

O112-BP-024750 - Oracle database products must be a version supported by the vendor.

CCI|CCI-002605

Rule-ID|SV-251801r810846_rule

STIG-ID|O112-BP-024750

Vuln-ID|V-251801

O112-BP-025101 - The directory assigned to the AUDIT_FILE_DEST parameter must be protected from unauthorized access and must be stored in a dedicated directory or disk partition separate from software or other application files.

Detections

Analytics

DISA STIG Oracle 11.2g v2r3 Database

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Jun 17, 2024 Miscellaneous Metadata updated.
Revision 1.1 May 17, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.