Item Search

NameAudit NamePluginCategory
2.2 Give the BIND User Account an Invalid ShellCIS BIND DNS v1.0.0 L1 Authoritative Name ServerUnix

ACCESS CONTROL

2.2 Give the BIND User Account an Invalid ShellCIS BIND DNS v1.0.0 L1 Caching Only Name ServerUnix

ACCESS CONTROL

2.2.10 Ensure 'UTL_FILE_DIR' Is EmptyCIS Oracle Server 12c DB Traditional Auditing v3.0.0OracleDB

ACCESS CONTROL

2.2.10 Ensure 'UTL_FILE_DIR' Is EmptyCIS Oracle Server 12c DB Unified Auditing v3.0.0OracleDB

ACCESS CONTROL

3.1 Set a nondeterministic Shutdown command valueCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

3.1 Set a nondeterministic Shutdown command valueCIS Apache Tomcat 9 L1 v1.2.0 MiddlewareUnix

ACCESS CONTROL

3.1 Set a nondeterministic Shutdown command valueCIS Apache Tomcat 9 L1 v1.2.0Unix

ACCESS CONTROL

3.1 Set a nondeterministic Shutdown command valueCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

4.1 Ensure That Instances Are Not Configured To Use the Default Service AccountCIS Google Cloud Platform v3.0.0 L1GCP

IDENTIFICATION AND AUTHENTICATION

4.2 Ensure All Sample Data And Users Have Been RemovedCIS Oracle Server 12c DB Unified Auditing v3.0.0OracleDB

ACCESS CONTROL

4.2 Ensure All Sample Data And Users Have Been RemovedCIS Oracle Server 18c DB Unified Auditing v1.1.0OracleDB

ACCESS CONTROL

4.2 Ensure All Sample Data And Users Have Been RemovedCIS Oracle Server 12c DB Traditional Auditing v3.0.0OracleDB

ACCESS CONTROL

4.2 Ensure All Sample Data And Users Have Been RemovedCIS Oracle Server 18c DB Traditional Auditing v1.1.0OracleDB

ACCESS CONTROL

4.2 Ensure That Instances Are Not Configured To Use the Default Service Account With Full Access to All Cloud APIsCIS Google Cloud Platform v3.0.0 L1GCP

IDENTIFICATION AND AUTHENTICATION

4.4 Ensure 'local_infile' Is DisabledCIS MySQL 5.6 Enterprise Database L1 v2.0.0MySQLDB

CONFIGURATION MANAGEMENT

4.4 Ensure 'local_infile' Is DisabledCIS MySQL 5.6 Community Database L1 v2.0.0MySQLDB

CONFIGURATION MANAGEMENT

4.4 Harden Usage for 'local_infile' on MariaDB ClientsCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

CONFIGURATION MANAGEMENT

4.4 Harden Usage for 'local_infile' on MariaDB ClientsCIS MariaDB 10.6 on Linux L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

4.4 Harden Usage for 'local_infile' on MySQL ClientsCIS MySQL 8.0 Community Linux OS L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

4.4 Harden Usage for 'local_infile' on MySQL ClientsCIS MySQL 5.7 Enterprise Database L1 v2.0.0MySQLDB

CONFIGURATION MANAGEMENT

4.4 Harden Usage for 'local_infile' on MySQL ClientsCIS MySQL 8.0 Enterprise Database L1 v1.3.0MySQLDB

CONFIGURATION MANAGEMENT

4.4 Harden Usage for 'local_infile' on MySQL ClientsCIS MySQL 5.7 Community Database L1 v2.0.0MySQLDB

CONFIGURATION MANAGEMENT

4.4 Harden Usage for 'local_infile' on MySQL ClientsCIS MySQL 8.0 Community Database L1 v1.0.0MySQLDB

CONFIGURATION MANAGEMENT

4.4 Harden Usage for 'local_infile' on MySQL Clients - mysql client versionCIS MySQL 8.0 Enterprise Linux OS L1 v1.3.0Unix

CONFIGURATION MANAGEMENT

5.1 Ensure Options for the OS Root Directory Are RestrictedCIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL

5.2 Ensure Options for the Web Root Directory Are RestrictedCIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL

5.2 Ensure Options for the Web Root Directory Are RestrictedCIS Apache HTTP Server 2.4 L1 v2.1.0 MiddlewareUnix

ACCESS CONTROL

5.3 Ensure Options for Other Directories Are MinimizedCIS Apache HTTP Server 2.4 L1 v2.1.0Unix

ACCESS CONTROL

5.5 Ensure the Default CGI Content printenv Script Is RemovedCIS Apache HTTP Server 2.2 L1 v3.6.0 MiddlewareUnix

ACCESS CONTROL

5.5 Ensure the Default CGI Content printenv Script Is RemovedCIS Apache HTTP Server 2.2 L2 v3.6.0Unix

ACCESS CONTROL

5.5 Ensure the Default CGI Content printenv Script Is RemovedCIS Apache HTTP Server 2.2 L1 v3.6.0Unix

ACCESS CONTROL

5.6 Ensure the Default CGI Content test-cgi Script Is RemovedCIS Apache HTTP Server 2.2 L2 v3.6.0Unix

ACCESS CONTROL

5.6 Ensure the Default CGI Content test-cgi Script Is RemovedCIS Apache HTTP Server 2.2 L1 v3.6.0Unix

ACCESS CONTROL

5.6 Ensure the Default CGI Content test-cgi Script Is RemovedCIS Apache HTTP Server 2.2 L1 v3.6.0 MiddlewareUnix

ACCESS CONTROL

6.10.5.9 Ensure REST Connection Limit is SetCIS Juniper OS Benchmark v2.1.0 L1Juniper

ACCESS CONTROL

6.10.5.11 Ensure REST Service Address is Set to OOB Management OnlyCIS Juniper OS Benchmark v2.1.0 L2Juniper

ACCESS CONTROL

9.3 Ensure 'super_priv' is Not Set to 'Y' for Replication UsersCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

ACCESS CONTROL

9.4 Ensure 'super_priv' Is Not Set to 'Y' for Replication UsersCIS MySQL 5.6 Enterprise Database L1 v2.0.0MySQLDB

ACCESS CONTROL

9.4 Ensure 'super_priv' is Not Set to 'Y' for Replication UsersCIS MySQL 8.0 Community Database L1 v1.0.0MySQLDB

ACCESS CONTROL

10.2 Restrict access to the web administration applicationCIS Apache Tomcat 8 L2 v1.1.0Unix

ACCESS CONTROL

10.2 Restrict access to the web administration applicationCIS Apache Tomcat 8 L2 v1.1.0 MiddlewareUnix

ACCESS CONTROL

10.3 Restrict manager applicationCIS Apache Tomcat 8 L2 v1.1.0 MiddlewareUnix

ACCESS CONTROL

10.3 Restrict manager applicationCIS Apache Tomcat 8 L2 v1.1.0Unix

ACCESS CONTROL

10.3 Restrict manager applicationCIS Apache Tomcat 10 L2 v1.1.0Unix

ACCESS CONTROL

10.3 Restrict manager applicationCIS Apache Tomcat 10 L2 v1.1.0 MiddlewareUnix

ACCESS CONTROL

10.13 Do not run applications as privilegedCIS Apache Tomcat 10 L1 v1.1.0Unix

ACCESS CONTROL

10.14 Do not run applications as privilegedCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

10.14 Do not run applications as privilegedCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

10.15 Do not allow cross context requestsCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

10.15 Do not allow cross context requestsCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL