Home
Security Hardening
DISA STIG MongoDB Enterprise Advanced 3.x V1R2

DISA STIG MongoDB Enterprise Advanced 3.x V1R2

MD3X-00-000700 – MongoDB must require users to reauthenticate when organization-defined circumstances or situations require reauthentication.
Details The DoD standard for authentication of an interactive user is the presentation of a Common Access Card (CAC) or...
MD3X-00-000460 – Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.
Details Applications, including DBMSs, must prevent unauthorized and unintended information transfer via shared system resources. Data used for the development...
MD3X-00-000710 – MongoDB must prohibit the use of cached authenticators after an organization-defined time period.
Details If cached authentication information is out-of-date, the validity of the authentication information may be questionable. NOTE: Nessus has not...
MD3X-00-000470 – MongoDB must prevent unauthorized and unintended information transfer via shared system resources – .conf file
Details The purpose of this control is to prevent information, including encrypted representations of information, produced by the actions of...
MD3X-00-000730 – MongoDB must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.
Details Only DoD-approved external PKIs have been evaluated to ensure that they have security controls and identity vetting procedures in...
MD3X-00-000470 – MongoDB must prevent unauthorized and unintended information transfer via shared system resources – Data Dir
Details The purpose of this control is to prevent information, including encrypted representations of information, produced by the actions of...
MD3X-00-000740 – MongoDB must implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.
Details DBMSs handling data requiring ‘data at rest’ protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of...
MD3X-00-000760 – MongoDB must maintain the confidentiality and integrity of information during preparation for transmission – mode
Details Information can be either unintentionally or maliciously disclosed or modified during preparation for transmission, including, for example, during aggregation,...
MD3X-00-000770 – MongoDB must maintain the confidentiality and integrity of information during reception – PEMKeyFile
Details Information can be either unintentionally or maliciously disclosed or modified during reception, including, for example, during aggregation, at protocol...
MD3X-00-000780 – When invalid inputs are received, MongoDB must behave in a predictable and documented manner that reflects organizational and system objectives.
Details A common vulnerability is unplanned behavior when invalid inputs are received. This requirement guards against adverse or unintended system...

Prev Next

DISA STIG MongoDB Enterprise Advanced 3.x V1R2

MD3X-00-000700 – MongoDB must require users to reauthenticate when organization-defined circumstances or situations require reauthentication.

MD3X-00-000460 – Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

MD3X-00-000710 – MongoDB must prohibit the use of cached authenticators after an organization-defined time period.

MD3X-00-000470 – MongoDB must prevent unauthorized and unintended information transfer via shared system resources – .conf file

MD3X-00-000730 – MongoDB must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

MD3X-00-000470 – MongoDB must prevent unauthorized and unintended information transfer via shared system resources – Data Dir

MD3X-00-000740 – MongoDB must implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.

MD3X-00-000760 – MongoDB must maintain the confidentiality and integrity of information during preparation for transmission – mode

MD3X-00-000770 – MongoDB must maintain the confidentiality and integrity of information during reception – PEMKeyFile

MD3X-00-000780 – When invalid inputs are received, MongoDB must behave in a predictable and documented manner that reflects organizational and system objectives.