4.5 Ensure 'SYS.USER$MIG' Has Been Dropped

Information

The table sys.user$mig is created during migration and contains the Oracle password hashes before the migration starts. This table should be dropped.

The table sys.user$mig is not deleted after the migration. An attacker could access the table containing the Oracle password hashes.

Solution

To remediate this setting, execute the following SQL statement, keeping in mind if this is granted in both container and pluggable database, you must connect to both places to revoke.

DROP TABLE SYS.USER$MIG;

See Also

https://workbench.cisecurity.org/benchmarks/11760

Item Details

Category: IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|IA-5(1), 800-53|SC-28, 800-53|SC-28(1), CSCv7|16.4

Plugin: OracleDB

Control ID: 251208537d437ea04f702dcd4a8cfbe52b9f3cc36812ad50396e4b6816f3643c