Check: SRG-APP-000705-DB-000110
Database SRG:
SRG-APP-000705-DB-000110
(in versions v4 r2 through v4 r1)
Title
The DBMS must disable accounts when the accounts are no longer associated to a user. (Cat II impact)
Discussion
Disabling expired, inactive, or otherwise anomalous accounts supports the concepts of least privilege and least functionality, which reduce the attack surface of the system.
Check Content
Verify the DBMS is configured to disable accounts when the accounts are no longer associated to a user. If the DBMS is not configured to disable accounts when the accounts are no longer associated to a user, this is a finding.
Fix Text
Configure the DBMS to disable accounts when the accounts are no longer associated to a user.
Additional Identifiers
Rule ID: SV-263603r982481_rule
Vulnerability ID: V-263603
Group Title: SRG-APP-000705
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-003628 |
Disable accounts when the accounts are no longer associated to a user. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| No controls are assigned to this check |