An error occurred:

Oracle MySQL 8.0 STIG

Oracle MySQL 8.0 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
MYS8-00-000100 V-235095 MySQL Database Server 8.0 must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. Cat I
MYS8-00-000200 V-235096 MySQL Database Server 8.0 must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types. Cat II
MYS8-00-000300 V-235097 MySQL Database Server 8.0 must produce audit records containing sufficient information to establish what type of events occurred. Cat II
MYS8-00-000800 V-235098 The MySQL Database Server 8.0 must include additional, more detailed, organizationally defined information in the audit records for audit events identified by type, location, or subject. Cat II
MYS8-00-001200 V-235099 The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized read access. Cat II
MYS8-00-001300 V-235100 The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized modification. Cat II
MYS8-00-001400 V-235101 The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized deletion. Cat II
MYS8-00-001500 V-235102 The MySQL Database Server 8.0 must protect against a user falsely repudiating having performed organization-defined actions. Cat II
MYS8-00-001600 V-235103 The MySQL Database Server 8.0 must be configured to provide audit record generation capability for DoD-defined auditable events within all database components. Cat II
MYS8-00-001700 V-235104 The MySQL Database Server 8.0 must allow only the Information System Security Manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited. Cat II
MYS8-00-001800 V-235105 The MySQL Database Server 8.0 must be able to generate audit records when privileges/permissions are retrieved. Cat II
MYS8-00-001900 V-235106 The MySQL Database Server 8.0 must be able to generate audit records when unsuccessful attempts to retrieve privileges/permissions occur. Cat II
MYS8-00-002000 V-235107 The MySQL Database Server 8.0 must be able to generate audit records when security objects are accessed. Cat II
MYS8-00-002100 V-235108 The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access security objects occur. Cat II
MYS8-00-002200 V-235109 The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are accessed. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.