5.2.4 Ensure 'EXECUTE ANY PROCEDURE' Is Revoked from 'DBSNMP'

Information

Remove unneeded EXECUTE ANY PROCEDURE privileges from DBSNMP

Migrated DBSNMP users have more privileges than required.

Solution

To remediate this setting, execute the following SQL statement, keeping in mind if this is granted in both container and pluggable database, you must connect to both places to revoke.

REVOKE EXECUTE ANY PROCEDURE FROM DBSNMP;

See Also

https://workbench.cisecurity.org/benchmarks/11760

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: OracleDB

Control ID: 8d8598b6bf17c08c745e0547918260b8dcb6419c0004983af35c5c419ef2d7c5