Home
Security Hardening
DISA STIG Oracle 12C V2R3 Windows

DISA STIG Oracle 12C V2R3 Windows

DISA_STIG_Oracle_Database_12c_v2r3_OS_Windows.audit from DISA Oracle Database 12c v2r3 STIG
See Also https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_12c_V2R3_STIG.zip This control applies to the following type of system Windows. Source Tenable.com/audits
O121-BP-022200 – The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.
Details It is critically important to the security of your system that you protect your password file and the environment...
O121-BP-024100 – DBMS production application and data directories must be protected from developers on shared production/development DBMS host systems.
Details Developer roles must not be assigned DBMS administrative privileges to production DBMS application and data directories. The separation of...
O121-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users.
Details The DBMS software libraries contain the executables used by the DBMS to operate. Unauthorized access to the libraries can...
O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – Rules
Details Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users. Solution Configure the...
O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – tcp.invited_nodes=
Details Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users. Solution Configure the...
O121-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SERVER
Details Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism in...
O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – tcp.validnode_checking=YES
Details Restricting remote access to specific, trusted systems helps prevent access by unauthorized and potentially malicious users. Solution Configure the...
O121-BP-026500 – Remote administration must be disabled for the Oracle connection manager.
Details Remote administration provides a potential opportunity for malicious users to make unauthorized changes to the Connection Manager configuration or...
O121-BP-026600 – Network client connections must be restricted to supported versions – SQLNET.ALLOWED_LOGON_VERSION_CLIENT
Details Unsupported Oracle network client installations may introduce vulnerabilities to the database. Restriction to use of supported versions helps to...

DISA STIG Oracle 12C V2R3 Windows

DISA_STIG_Oracle_Database_12c_v2r3_OS_Windows.audit from DISA Oracle Database 12c v2r3 STIG

O121-BP-022200 – The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE.

O121-BP-024100 – DBMS production application and data directories must be protected from developers on shared production/development DBMS host systems.

O121-BP-025400 – Access to DBMS software files and directories must not be granted to unauthorized users.

O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – Rules

O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – tcp.invited_nodes=

O121-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – SERVER

O121-BP-025600 – Network access to the DBMS must be restricted to authorized personnel – tcp.validnode_checking=YES

O121-BP-026500 – Remote administration must be disabled for the Oracle connection manager.

O121-BP-026600 – Network client connections must be restricted to supported versions – SQLNET.ALLOWED_LOGON_VERSION_CLIENT