Details

With raw logging of passwords enabled someone with access to the log files might see plain text passwords.

Solution

Perform the following actions to remediate this setting: Open the MySQL configuration file (my.cnf) Find the log-raw entry and set it as follows log-raw = OFF

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1619

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.
• CSCv6|3.1

Source

• Tenable.com/audits