Details

Use an IP address rather than a hostname to connect to the host of the DB2 instance.

Using a hostname to connect to a DB2 instance can display useful information about the host to an attacker. For example, hostnames for DB2 instances often contain the DB2 version number, host type, or operating system type.

Solution

To reconfigure the connection string, launch the DB2 Configuration Assistant and change the connection’s Hostname value from a text name to an IP address.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1654

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.
• CSCv6|3.1

Source

• Tenable.com/audits