4.6 Ensure No Public Database Links Exist

Information

Public Database links are used to allow connections between databases.

Using public database links in the database can allow anyone with a connection to the database to query, update, insert, delete data on a remote database depending on the userid that is part of the link.

Solution

To remediate this setting, execute the following SQL statement, keeping in mind if this is granted in both container and pluggable database, you must connect to both places to revoke.

DROP PUBLIC DATABASE LINK <DB_LINK>;

See Also

https://workbench.cisecurity.org/benchmarks/11760

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: OracleDB

Control ID: b78e1326d2ba0af36aab469d8d2d4f2bf108989cc26f731dc2f29725c0444900