Home
Security Hardening
Oracle WebLogic Server 12C Windows V2R1

Oracle WebLogic Server 12C Windows V2R1

WBLC-01-000009 – Oracle WebLogic must utilize cryptography to protect the confidentiality of remote access management sessions – SSL Listen Port
Details Remote management access is accomplished by leveraging common communication protocols and establishing a remote connection to the application server...
WBLC-01-000009 – Oracle WebLogic must utilize cryptography to protect the confidentiality of remote access management sessions – Unsecure Listen Port
Details Remote management access is accomplished by leveraging common communication protocols and establishing a remote connection to the application server...
WBLC-01-000010 – Oracle WebLogic must use cryptography to protect the integrity of the remote access session – SSL Listen Port
Details Encryption is critical for protection of remote access sessions. If encryption is not being used for integrity, malicious users...
WBLC-01-000010 – Oracle WebLogic must use cryptography to protect the integrity of the remote access session – Unsecure Listen Port
Details Encryption is critical for protection of remote access sessions. If encryption is not being used for integrity, malicious users...
WBLC-01-000011 – Oracle WebLogic must employ automated mechanisms to facilitate the monitoring and control of remote access methods.
Details Remote network access is accomplished by leveraging common communication protocols and establishing a remote connection. Application servers provide remote...
WBLC-01-000013 – Oracle WebLogic must ensure remote sessions for accessing security functions and security-relevant information are audited.
Details Auditing must be utilized in order to track system activity, assist in diagnosing system issues and provide evidence needed...
WBLC-01-000014 – Oracle WebLogic must support the capability to disable network protocols deemed by the organization to be non-secure except for explicitly identified components in support of specific operational requirements.
Details Some networking protocols may not meet organizational security requirements to protect data and components. Application servers natively host a...
WBLC-01-000018 – Oracle WebLogic must automatically audit account creation – Auditing Provider
Details Application servers require user accounts for server management purposes, and if the creation of new accounts is not logged,...
WBLC-01-000018 – Oracle WebLogic must automatically audit account creation – Configuration Audit Type
Details Application servers require user accounts for server management purposes, and if the creation of new accounts is not logged,...
WBLC-01-000019 – Oracle WebLogic must automatically audit account modification – Auditing Provider
Details Once an attacker establishes initial access to a system, they often attempt to create a persistent method of reestablishing...

Oracle WebLogic Server 12C Windows V2R1

WBLC-01-000009 – Oracle WebLogic must utilize cryptography to protect the confidentiality of remote access management sessions – SSL Listen Port

WBLC-01-000009 – Oracle WebLogic must utilize cryptography to protect the confidentiality of remote access management sessions – Unsecure Listen Port

WBLC-01-000010 – Oracle WebLogic must use cryptography to protect the integrity of the remote access session – SSL Listen Port

WBLC-01-000010 – Oracle WebLogic must use cryptography to protect the integrity of the remote access session – Unsecure Listen Port

WBLC-01-000011 – Oracle WebLogic must employ automated mechanisms to facilitate the monitoring and control of remote access methods.

WBLC-01-000013 – Oracle WebLogic must ensure remote sessions for accessing security functions and security-relevant information are audited.

WBLC-01-000014 – Oracle WebLogic must support the capability to disable network protocols deemed by the organization to be non-secure except for explicitly identified components in support of specific operational requirements.

WBLC-01-000018 – Oracle WebLogic must automatically audit account creation – Auditing Provider

WBLC-01-000018 – Oracle WebLogic must automatically audit account creation – Configuration Audit Type

WBLC-01-000019 – Oracle WebLogic must automatically audit account modification – Auditing Provider