STIGQter: STIG Summary: Oracle Database 12c Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.

DISA Rule

SV-219830r533031_rule

Vulnerability Number

V-219830

Group Title

SRG-APP-000516-DB-000363

Rule Version

O121-BP-021900

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Document remote OS authentication in the System Security Plan.

If not required or not mitigated to an acceptable level, disable remote OS authentication.

From SQL*Plus:

alter system set remote_os_authent = FALSE scope = spfile;

The above SQL*Plus command will set the parameter to take effect at next system startup.

Check Contents

From SQL*Plus:

select value from v$parameter where name = 'remote_os_authent';

If the value returned does not equal FALSE, this is a finding.

Vulnerability Number

V-219830

Documentable

False

Rule Version

O121-BP-021900

Severity Override Guidance

From SQL*Plus:

select value from v$parameter where name = 'remote_os_authent';

If the value returned does not equal FALSE, this is a finding.

Check Content Reference

M

Target Key

4059

Comments