Home
Security Hardening
DISA STIG MongoDB Enterprise Advanced 3.x V1R2

DISA STIG MongoDB Enterprise Advanced 3.x V1R2

MD3X-00-000010 – MongoDB must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.
Details MongoDB must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and...
MD3X-00-000020 – MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
Details MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control...
MD3X-00-000040 – MongoDB must provide audit record generation for DoD-defined auditable events within all DBMS/database components.
Details MongoDB must provide audit record generation capability for DoD-defined auditable events within all DBMS/database components. Satisfies: SRG-APP-000089-DB-000064, SRG-APP-000080-DB-000063, SRG-APP-000090-DB-000065,...
MD3X-00-000190 – The audit information produced by MongoDB must be protected from unauthorized read access.
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
MD3X-00-000220 – MongoDB must protect its audit features from unauthorized access.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Depending upon...
MD3X-00-000250 – MongoDB software installation account must be restricted to authorized users.
Details When dealing with change control issues, it should be noted any changes to the hardware, software, and/or firmware components...
MD3X-00-000260 – Database software, including DBMS configuration files, must be stored in dedicated directories, or DASD pools, separate from the host OS and other applications.
Details When dealing with change control issues, it should be noted any changes to the hardware, software, and/or firmware components...
MD3X-00-000330 – If passwords are used for authentication, MongoDB must store only hashed, salted representations of passwords.
Details The DoD standard for authentication is DoD-approved PKI certificates. Authentication based on User ID and Password may be used...
MD3X-00-000340 – If passwords are used for authentication, MongoDB must transmit only encrypted representations of passwords – allowInvalidCertificates
Details The DoD standard for authentication is DoD-approved PKI certificates. Authentication based on User ID and Password may be used...
MD3X-00-000340 – If passwords are used for authentication, MongoDB must transmit only encrypted representations of passwords – CAFile
Details The DoD standard for authentication is DoD-approved PKI certificates. Authentication based on User ID and Password may be used...

DISA STIG MongoDB Enterprise Advanced 3.x V1R2

MD3X-00-000010 – MongoDB must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

MD3X-00-000020 – MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

MD3X-00-000040 – MongoDB must provide audit record generation for DoD-defined auditable events within all DBMS/database components.

MD3X-00-000190 – The audit information produced by MongoDB must be protected from unauthorized read access.

MD3X-00-000220 – MongoDB must protect its audit features from unauthorized access.

MD3X-00-000250 – MongoDB software installation account must be restricted to authorized users.

MD3X-00-000260 – Database software, including DBMS configuration files, must be stored in dedicated directories, or DASD pools, separate from the host OS and other applications.

MD3X-00-000330 – If passwords are used for authentication, MongoDB must store only hashed, salted representations of passwords.

MD3X-00-000340 – If passwords are used for authentication, MongoDB must transmit only encrypted representations of passwords – allowInvalidCertificates

MD3X-00-000340 – If passwords are used for authentication, MongoDB must transmit only encrypted representations of passwords – CAFile