Home
Security Hardening
DISA STIG Oracle 12C V2R3 Windows

DISA STIG Oracle 12C V2R3 Windows

O121-BP-026600 – Network client connections must be restricted to supported versions – SQLNET.ALLOWED_LOGON_VERSION_SERVER
Details Unsupported Oracle network client installations may introduce vulnerabilities to the database. Restriction to use of supported versions helps to...
O121-C1-004500 – DBA OS accounts must be granted only those host system privileges necessary for the administration of the DBMS.
Details This requirement is intended to limit exposure due to operating from within a privileged account or role. The inclusion...
O121-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key.
Details The cornerstone of the PKI is the private key used to encrypt or digitally sign information. If the private...
O121-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_CIPHER_SUITES
Details The cornerstone of the PKI is the private key used to encrypt or digitally sign information. If the private...
O121-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_CLIENT_AUTHENTICATION
Details The cornerstone of the PKI is the private key used to encrypt or digitally sign information. If the private...
O121-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – CLIENT
Details Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism in...
O121-C2-001700 – The DBMS must support the disabling of network protocols deemed by the organization to be nonsecure.
Details This requirement is related to remote access, but more specifically to the networking protocols allowing systems to communicate. Remote...
O121-C2-004400 – OS accounts utilized to run external procedures called by the DBMS must have limited privileges – run_group
Details This requirement is intended to limit exposure due to operating from within a privileged account or role. The inclusion...
O121-C2-004400 – OS accounts utilized to run external procedures called by the DBMS must have limited privileges – run_user
Details This requirement is intended to limit exposure due to operating from within a privileged account or role. The inclusion...
O121-C2-011810 – Access to external executables must be disabled or restricted – extproc does not exist
Details The Oracle external procedure capability provides use of the Oracle process account outside the operation of the DBMS process....

Prev Next

DISA STIG Oracle 12C V2R3 Windows

O121-BP-026600 – Network client connections must be restricted to supported versions – SQLNET.ALLOWED_LOGON_VERSION_SERVER

O121-C1-004500 – DBA OS accounts must be granted only those host system privileges necessary for the administration of the DBMS.

O121-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key.

O121-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_CIPHER_SUITES

O121-C1-015400 – The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key – SSL_CLIENT_AUTHENTICATION

O121-C1-019700 – The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures – CLIENT

O121-C2-001700 – The DBMS must support the disabling of network protocols deemed by the organization to be nonsecure.

O121-C2-004400 – OS accounts utilized to run external procedures called by the DBMS must have limited privileges – run_group

O121-C2-004400 – OS accounts utilized to run external procedures called by the DBMS must have limited privileges – run_user

O121-C2-011810 – Access to external executables must be disabled or restricted – extproc does not exist