DISA_STIG_Oracle_MySQL_8.0_v2r1_Database.audit from DISA Oracle MySQL 8.0 v2r1 STIG

MYS8-00-000100 - MySQL Database Server 8.0 must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

CAT|I

CCI|CCI-000015

Rule-ID|SV-235095r960768_rule

STIG-ID|MYS8-00-000100

Vuln-ID|V-235095

MYS8-00-000200 - MySQL Database Server 8.0  must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

CAT|II

CCI|CCI-000054

Rule-ID|SV-235096r960735_rule

STIG-ID|MYS8-00-000200

Vuln-ID|V-235096

MYS8-00-000300 - MySQL Database Server 8.0  must produce audit records containing sufficient information to establish what type of events occurred.

CCI|CCI-000130

Rule-ID|SV-235097r960891_rule

STIG-ID|MYS8-00-000300

Vuln-ID|V-235097

MYS8-00-000800 - The MySQL Database Server 8.0 must include additional, more detailed, organizationally defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-235098r960909_rule

STIG-ID|MYS8-00-000800

Vuln-ID|V-235098

MYS8-00-001500 - The MySQL Database Server 8.0 must protect against a user falsely repudiating having performed organization-defined actions.

CCI|CCI-000166

Rule-ID|SV-235102r960864_rule

STIG-ID|MYS8-00-001500

Vuln-ID|V-235102

MYS8-00-001600 - The MySQL Database Server 8.0 must be configured to provide audit record generation capability for DoD-defined auditable events within all database components.

CCI|CCI-000169

Rule-ID|SV-235103r960879_rule

STIG-ID|MYS8-00-001600

Vuln-ID|V-235103

MYS8-00-001700 - The MySQL Database Server 8.0 must allow only the Information System Security Manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

CCI|CCI-000171

Rule-ID|SV-235104r960882_rule

STIG-ID|MYS8-00-001700

Vuln-ID|V-235104

MYS8-00-001800 - The MySQL Database Server 8.0 must be able to generate audit records when privileges/permissions are retrieved.

CCI|CCI-000172

Rule-ID|SV-235105r960885_rule

STIG-ID|MYS8-00-001800

Vuln-ID|V-235105

MYS8-00-001900 - The MySQL Database Server 8.0 must be able to generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-235106r960885_rule

STIG-ID|MYS8-00-001900

Vuln-ID|V-235106

MYS8-00-002000 - The MySQL Database Server 8.0 must be able to generate audit records when security objects are accessed.

Rule-ID|SV-235107r961791_rule

STIG-ID|MYS8-00-002000

Vuln-ID|V-235107

MYS8-00-002100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access security objects occur.

Rule-ID|SV-235108r961791_rule

STIG-ID|MYS8-00-002100

Vuln-ID|V-235108

MYS8-00-002200 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are accessed.

Rule-ID|SV-235109r961797_rule

STIG-ID|MYS8-00-002200

Vuln-ID|V-235109

MYS8-00-002300 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access categories of information (e.g., classification levels/security levels) occur.

Rule-ID|SV-235110r961797_rule

STIG-ID|MYS8-00-002300

Vuln-ID|V-235110

MYS8-00-002400 - The MySQL Database Server 8.0 must generate audit records when privileges/permissions are added.

Rule-ID|SV-235111r961800_rule

STIG-ID|MYS8-00-002400

Vuln-ID|V-235111

MYS8-00-002500 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to add privileges/permissions occur.

Rule-ID|SV-235112r961800_rule

STIG-ID|MYS8-00-002500

Vuln-ID|V-235112

MYS8-00-002600 - The MySQL Database Server 8.0 must generate audit records when privileges/permissions are modified.

Rule-ID|SV-235113r961800_rule

STIG-ID|MYS8-00-002600

Vuln-ID|V-235113

MYS8-00-002700 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify privileges/permissions occur.

Rule-ID|SV-235114r961800_rule

STIG-ID|MYS8-00-002700

Vuln-ID|V-235114

MYS8-00-002800 - The MySQL Database Server 8.0 must generate audit records when security objects are modified.

Rule-ID|SV-235115r961803_rule

STIG-ID|MYS8-00-002800

Vuln-ID|V-235115

MYS8-00-002900 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify security objects occur.

Rule-ID|SV-235116r961803_rule

STIG-ID|MYS8-00-002900

Vuln-ID|V-235116

MYS8-00-003000 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are modified.

Rule-ID|SV-235117r961809_rule

STIG-ID|MYS8-00-003000

Vuln-ID|V-235117

MYS8-00-003100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify categories of information (e.g., classification levels/security levels) occur.

Rule-ID|SV-235118r961809_rule

STIG-ID|MYS8-00-003100

Vuln-ID|V-235118

MYS8-00-003200 - The MySQL Database Server 8.0 must generate audit records when privileges/permissions are deleted.

Rule-ID|SV-235119r961812_rule

STIG-ID|MYS8-00-003200

Vuln-ID|V-235119

MYS8-00-003300 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to delete privileges/permissions occur.

Rule-ID|SV-235120r961812_rule

STIG-ID|MYS8-00-003300

Vuln-ID|V-235120

MYS8-00-003400 - The MySQL Database Server 8.0 must generate audit records when security objects are deleted.

Rule-ID|SV-235121r961818_rule

STIG-ID|MYS8-00-003400

Vuln-ID|V-235121

MYS8-00-003500 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to delete security objects occur.

Rule-ID|SV-235122r961818_rule

STIG-ID|MYS8-00-003500

Vuln-ID|V-235122

MYS8-00-003600 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are deleted.

Rule-ID|SV-235123r961821_rule

STIG-ID|MYS8-00-003600

Vuln-ID|V-235123

MYS8-00-003700 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to delete categories of information (e.g., classification levels/security levels) occur.

Rule-ID|SV-235124r961821_rule

STIG-ID|MYS8-00-003700

Vuln-ID|V-235124

MYS8-00-003800 - The MySQL Database Server 8.0 must generate audit records when successful logons or connections occur.

Rule-ID|SV-235125r961824_rule

STIG-ID|MYS8-00-003800

Vuln-ID|V-235125

MYS8-00-003900 - The MySQL Database Server 8.0 must generate audit records when unsuccessful logons or connection attempts occur.

Rule-ID|SV-235126r961824_rule

STIG-ID|MYS8-00-003900

Vuln-ID|V-235126

MYS8-00-004000 - The MySQL Database Server 8.0 must generate audit records for all privileged activities or other system-level access.

Rule-ID|SV-235127r961827_rule

STIG-ID|MYS8-00-004000

Vuln-ID|V-235127

MYS8-00-004100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to execute privileged activities or other system-level access occur.

Rule-ID|SV-235128r961827_rule

STIG-ID|MYS8-00-004100

Vuln-ID|V-235128

MYS8-00-004200 - The MySQL Database Server 8.0 must generate audit records showing starting and ending time for user access to the database(s).

Rule-ID|SV-235129r961830_rule

STIG-ID|MYS8-00-004200

Vuln-ID|V-235129

MYS8-00-004300 - The MySQL Database Server 8.0 must generate audit records when concurrent logons/connections by the same user from different workstations.

Rule-ID|SV-235130r961833_rule

STIG-ID|MYS8-00-004300

Vuln-ID|V-235130

MYS8-00-004400 - The MySQL Database Server 8.0 must be able to generate audit records when successful accesses to objects occur.

Rule-ID|SV-235131r961836_rule

STIG-ID|MYS8-00-004400

Vuln-ID|V-235131

MYS8-00-004500 - The MySQL Database Server 8.0 must generate audit records when unsuccessful accesses to objects occur.

Rule-ID|SV-235132r961836_rule

STIG-ID|MYS8-00-004500

Vuln-ID|V-235132

MYS8-00-004600 - The MySQL Database Server 8.0 must generate audit records for all direct access to the database(s).

Rule-ID|SV-235133r961839_rule

STIG-ID|MYS8-00-004600

Vuln-ID|V-235133

MYS8-00-004700 - The MySQL Database Server 8.0, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

CCI|CCI-000185

Rule-ID|SV-235134r961038_rule

STIG-ID|MYS8-00-004700

Vuln-ID|V-235134

MYS8-00-004800 - The MySQL Database Server 8.0 must enforce authorized access to all PKI private keys stored/utilized by the MySQL Database Server 8.0.

CCI|CCI-000186

Rule-ID|SV-235135r961041_rule

STIG-ID|MYS8-00-004800

Vuln-ID|V-235135

MYS8-00-004900 - The MySQL Database Server 8.0 must map the PKI-authenticated identity to an associated user account.

CCI|CCI-000187

Rule-ID|SV-235136r961044_rule

STIG-ID|MYS8-00-004900

Vuln-ID|V-235136

MYS8-00-005000 - If Database Management System (DBMS) authentication using passwords is employed, the DBMS must enforce the DOD standards for password complexity and lifetime - DBMS authentication using passwords is employed, the DBMS must enforce the DoD standards for password complexity and lifetime.

CCI|CCI-004066

Rule-ID|SV-235137r998288_rule

STIG-ID|MYS8-00-005000

Vuln-ID|V-235137

MYS8-00-005100 - If passwords are used for authentication, the MySQL Database Server 8.0 must store only hashed, salted representations of passwords.

CCI|CCI-004062

Rule-ID|SV-235138r998291_rule

STIG-ID|MYS8-00-005100

Vuln-ID|V-235138

MYS8-00-005200 - If passwords are used for authentication, the MySQL Database Server 8.0 must transmit only encrypted representations of passwords.

CCI|CCI-000197

Rule-ID|SV-235139r961029_rule

STIG-ID|MYS8-00-005200

Vuln-ID|V-235139

MYS8-00-005300 - The MySQL Database Server 8.0 must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

CCI|CCI-000206

Rule-ID|SV-235140r961047_rule

STIG-ID|MYS8-00-005300

Vuln-ID|V-235140

MYS8-00-005400 - The MySQL Database Server 8.0 must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

CCI|CCI-000213

Rule-ID|SV-235141r960792_rule

STIG-ID|MYS8-00-005400

Vuln-ID|V-235141

MYS8-00-005500 - The MySQL Database Server 8.0 must be configured in accordance with the security configuration settings based on DoD security configuration and implementation guidance, including STIGs, NSA configuration guides, CTOs, DTMs, and IAVMs.

CCI|CCI-000366

Rule-ID|SV-235142r961863_rule

STIG-ID|MYS8-00-005500

Vuln-ID|V-235142

MYS8-00-005600 - Default demonstration and sample databases, database objects, and applications must be removed.

Detections

Analytics

Revision 1.1

Nov 22, 2024

Miscellaneous