DISA_STIG_Oracle_MySQL_8.0_v1r4_Database.audit from DISA Oracle MySQL 8.0 v1r4 STIG

MYS8-00-000100 - MySQL Database Server 8.0 must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

CAT|I

CCI|CCI-000015

Rule-ID|SV-235095r879522_rule

STIG-ID|MYS8-00-000100

Vuln-ID|V-235095

MYS8-00-000200 - MySQL Database Server 8.0  must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types

CAT|II

CCI|CCI-000054

Rule-ID|SV-235096r879511_rule

STIG-ID|MYS8-00-000200

Vuln-ID|V-235096

MYS8-00-000300 - MySQL Database Server 8.0  must produce audit records containing sufficient information to establish what type of events occurred

CCI|CCI-000130

Rule-ID|SV-235097r879563_rule

STIG-ID|MYS8-00-000300

Vuln-ID|V-235097

MYS8-00-000800 - The MySQL Database Server 8.0 must include additional, more detailed, organizationally defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-235098r879569_rule

STIG-ID|MYS8-00-000800

Vuln-ID|V-235098

MYS8-00-001500 - The MySQL Database Server 8.0 must protect against a user falsely repudiating having performed organization-defined actions.

CCI|CCI-000166

Rule-ID|SV-235102r879554_rule

STIG-ID|MYS8-00-001500

Vuln-ID|V-235102

MYS8-00-001600 - The MySQL Database Server 8.0 must be configured to provide audit record generation capability for DoD-defined auditable events within all database components

CCI|CCI-000169

Rule-ID|SV-235103r879559_rule

STIG-ID|MYS8-00-001600

Vuln-ID|V-235103

MYS8-00-001700 - The MySQL Database Server 8.0 must allow only the Information System Security Manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

CCI|CCI-000171

Rule-ID|SV-235104r879560_rule

STIG-ID|MYS8-00-001700

Vuln-ID|V-235104

MYS8-00-001800 - The MySQL Database Server 8.0 must be able to generate audit records when privileges/permissions are retrieved

CCI|CCI-000172

Rule-ID|SV-235105r879561_rule

STIG-ID|MYS8-00-001800

Vuln-ID|V-235105

MYS8-00-001900 - The MySQL Database Server 8.0 must be able to generate audit records when unsuccessful attempts to retrieve privileges/permissions occur

Rule-ID|SV-235106r879561_rule

STIG-ID|MYS8-00-001900

Vuln-ID|V-235106

MYS8-00-002000 - The MySQL Database Server 8.0 must be able to generate audit records when security objects are accessed

Rule-ID|SV-235107r879863_rule

STIG-ID|MYS8-00-002000

Vuln-ID|V-235107

MYS8-00-002100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access security objects occur

Rule-ID|SV-235108r879863_rule

STIG-ID|MYS8-00-002100

Vuln-ID|V-235108

MYS8-00-002200 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are accessed

Rule-ID|SV-235109r879865_rule

STIG-ID|MYS8-00-002200

Vuln-ID|V-235109

MYS8-00-002300 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access categories of information (e.g., classification levels/security levels) occur

Rule-ID|SV-235110r879865_rule

STIG-ID|MYS8-00-002300

Vuln-ID|V-235110

MYS8-00-002400 - The MySQL Database Server 8.0 must generate audit records when privileges/permissions are added

Rule-ID|SV-235111r879866_rule

STIG-ID|MYS8-00-002400

Vuln-ID|V-235111

MYS8-00-002500 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to add privileges/permissions occur

Rule-ID|SV-235112r879866_rule

STIG-ID|MYS8-00-002500

Vuln-ID|V-235112

MYS8-00-002600 - The MySQL Database Server 8.0 must generate audit records when privileges/permissions are modified

Rule-ID|SV-235113r879866_rule

STIG-ID|MYS8-00-002600

Vuln-ID|V-235113

MYS8-00-002700 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify privileges/permissions occur

Rule-ID|SV-235114r879866_rule

STIG-ID|MYS8-00-002700

Vuln-ID|V-235114

MYS8-00-002800 - The MySQL Database Server 8.0 must generate audit records when security objects are modified

Rule-ID|SV-235115r879867_rule

STIG-ID|MYS8-00-002800

Vuln-ID|V-235115

MYS8-00-002900 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify security objects occur

Rule-ID|SV-235116r879867_rule

STIG-ID|MYS8-00-002900

Vuln-ID|V-235116

MYS8-00-003000 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are modified

Rule-ID|SV-235117r879869_rule

STIG-ID|MYS8-00-003000

Vuln-ID|V-235117

MYS8-00-003100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify categories of information (e.g., classification levels/security levels) occur

Rule-ID|SV-235118r879869_rule

STIG-ID|MYS8-00-003100

Vuln-ID|V-235118

MYS8-00-003200 - The MySQL Database Server 8.0 must generate audit records when privileges/permissions are deleted

Rule-ID|SV-235119r879870_rule

STIG-ID|MYS8-00-003200

Vuln-ID|V-235119

MYS8-00-003300 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to delete privileges/permissions occur

Rule-ID|SV-235120r879870_rule

STIG-ID|MYS8-00-003300

Vuln-ID|V-235120

MYS8-00-003400 - The MySQL Database Server 8.0 must generate audit records when security objects are deleted

Rule-ID|SV-235121r879872_rule

STIG-ID|MYS8-00-003400

Vuln-ID|V-235121

MYS8-00-003500 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to delete security objects occur

Rule-ID|SV-235122r879872_rule

STIG-ID|MYS8-00-003500

Vuln-ID|V-235122

MYS8-00-003600 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are deleted.

Rule-ID|SV-235123r879873_rule

STIG-ID|MYS8-00-003600

Vuln-ID|V-235123

MYS8-00-003700 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to delete categories of information (e.g., classification levels/security levels) occur

Rule-ID|SV-235124r879873_rule

STIG-ID|MYS8-00-003700

Vuln-ID|V-235124

MYS8-00-003800 - The MySQL Database Server 8.0 must generate audit records when successful logons or connections occur

Rule-ID|SV-235125r879874_rule

STIG-ID|MYS8-00-003800

Vuln-ID|V-235125

MYS8-00-003900 - The MySQL Database Server 8.0 must generate audit records when unsuccessful logons or connection attempts occur

Rule-ID|SV-235126r879874_rule

STIG-ID|MYS8-00-003900

Vuln-ID|V-235126

MYS8-00-004000 - The MySQL Database Server 8.0 must generate audit records for all privileged activities or other system-level access

Rule-ID|SV-235127r879875_rule

STIG-ID|MYS8-00-004000

Vuln-ID|V-235127

MYS8-00-004100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to execute privileged activities or other system-level access occur

Rule-ID|SV-235128r879875_rule

STIG-ID|MYS8-00-004100

Vuln-ID|V-235128

MYS8-00-004200 - The MySQL Database Server 8.0 must generate audit records showing starting and ending time for user access to the database(s)

Rule-ID|SV-235129r879876_rule

STIG-ID|MYS8-00-004200

Vuln-ID|V-235129

MYS8-00-004300 - The MySQL Database Server 8.0 must generate audit records when concurrent logons/connections by the same user from different workstations

Rule-ID|SV-235130r879877_rule

STIG-ID|MYS8-00-004300

Vuln-ID|V-235130

MYS8-00-004400 - The MySQL Database Server 8.0 must be able to generate audit records when successful accesses to objects occur

Rule-ID|SV-235131r879878_rule

STIG-ID|MYS8-00-004400

Vuln-ID|V-235131

MYS8-00-004500 - The MySQL Database Server 8.0 must generate audit records when unsuccessful accesses to objects occur

Rule-ID|SV-235132r879878_rule

STIG-ID|MYS8-00-004500

Vuln-ID|V-235132

MYS8-00-004600 - The MySQL Database Server 8.0 must generate audit records for all direct access to the database(s)

Rule-ID|SV-235133r879879_rule

STIG-ID|MYS8-00-004600

Vuln-ID|V-235133

MYS8-00-004700 - The MySQL Database Server 8.0, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation

CCI|CCI-000185

Rule-ID|SV-235134r879612_rule

STIG-ID|MYS8-00-004700

Vuln-ID|V-235134

MYS8-00-004800 - The MySQL Database Server 8.0 must enforce authorized access to all PKI private keys stored/utilized by the MySQL Database Server 8.0.

CCI|CCI-000186

Rule-ID|SV-235135r879613_rule

STIG-ID|MYS8-00-004800

Vuln-ID|V-235135

MYS8-00-004900 - The MySQL Database Server 8.0 must map the PKI-authenticated identity to an associated user account.

CCI|CCI-000187

Rule-ID|SV-235136r879614_rule

STIG-ID|MYS8-00-004900

Vuln-ID|V-235136

MYS8-00-005000 - If Database Management System (DBMS) authentication using passwords is employed, the DBMS must enforce the DoD standards for password complexity and lifetime.

CCI|CCI-000192

Rule-ID|SV-235137r879601_rule

STIG-ID|MYS8-00-005000

Vuln-ID|V-235137

MYS8-00-005100 - If passwords are used for authentication, the MySQL Database Server 8.0 must store only hashed, salted representations of passwords.

CCI|CCI-000196

Rule-ID|SV-235138r879608_rule

STIG-ID|MYS8-00-005100

Vuln-ID|V-235138

MYS8-00-005200 - If passwords are used for authentication, the MySQL Database Server 8.0 must transmit only encrypted representations of passwords.

CCI|CCI-000197

Rule-ID|SV-235139r879609_rule

STIG-ID|MYS8-00-005200

Vuln-ID|V-235139

MYS8-00-005300 - The MySQL Database Server 8.0 must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

CCI|CCI-000206

Rule-ID|SV-235140r879615_rule

STIG-ID|MYS8-00-005300

Vuln-ID|V-235140

MYS8-00-005400 - The MySQL Database Server 8.0 must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

CCI|CCI-000213

Rule-ID|SV-235141r879530_rule

STIG-ID|MYS8-00-005400

Vuln-ID|V-235141

MYS8-00-005500 - The MySQL Database Server 8.0 must be configured in accordance with the security configuration settings based on DoD security configuration and implementation guidance, including STIGs, NSA configuration guides, CTOs, DTMs, and IAVMs.

CCI|CCI-000366

Rule-ID|SV-235142r879887_rule

STIG-ID|MYS8-00-005500

Vuln-ID|V-235142

MYS8-00-005600 - Default demonstration and sample databases, database objects, and applications must be removed.

Detections

Analytics

DISA Oracle MySQL 8.0 v1r4 DB

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Jun 17, 2024 Miscellaneous Metadata updated.
Revision 1.1 Apr 30, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.