An error occurred:

Oracle Database 12c STIG

Oracle Database 12c Security Technical Implementation Guide

ID Vuln ID Title Cat Status
O121-BP-021200 V-219824 Access to default accounts used to support replication must be restricted to authorized DBAs. Cat II
O121-BP-021300 V-219825 Oracle instance names must not contain Oracle version numbers. Cat II
O121-BP-021400 V-219826 Fixed user and public database links must be authorized for use. Cat II
O121-BP-021500 V-219827 A minimum of two Oracle control files must be defined and configured to be stored on separate, archived disks (physical or virtual) or archived partitions on a RAID device. Cat III
O121-BP-021600 V-219828 A minimum of two Oracle redo log groups/files must be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device. Cat II
O121-BP-021700 V-219829 The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA or non-Application administrator user accounts. Cat II
O121-BP-021900 V-219830 The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE. Cat I
O121-BP-022000 V-219831 The Oracle REMOTE_OS_ROLES parameter must be set to FALSE. Cat I
O121-BP-022100 V-219832 The Oracle SQL92_SECURITY parameter must be set to TRUE. Cat II
O121-BP-022200 V-219833 The Oracle password file ownership and permissions should be limited and the REMOTE_LOGIN_PASSWORDFILE parameter must be set to EXCLUSIVE or NONE. Cat II
O121-BP-022300 V-219834 System privileges granted using the WITH ADMIN OPTION must not be granted to unauthorized user accounts. Cat II
O121-BP-022400 V-219835 System Privileges must not be granted to PUBLIC. Cat II
O121-BP-022500 V-219836 Oracle roles granted using the WITH ADMIN OPTION must not be granted to unauthorized accounts. Cat II
O121-BP-022600 V-219837 Object permissions granted to PUBLIC must be restricted. Cat II
O121-BP-022700 V-219838 The Oracle Listener must be configured to require administration authentication. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.