STIGQter: STIG Summary: Oracle Database 12c Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

Replication accounts must not be granted DBA privileges.

DISA Rule

SV-219866r401224_rule

Vulnerability Number

V-219866

Group Title

SRG-APP-000516-DB-000363

Rule Version

O121-BP-025500

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Restrict privileges assigned to replication accounts to the fewest possible privileges.

Remove DBA roles from replication accounts.

Create and use custom replication accounts assigned least privileges for supporting replication operations.

Check Contents

If a review of the System Security Plan confirms the use of replication is not required, not permitted and the database is not configured for replication, this check is not a finding.

If any replication accounts are assigned DBA roles or roles with DBA privileges, this is a finding.

Vulnerability Number

V-219866

Documentable

False

Rule Version

O121-BP-025500

Severity Override Guidance

If a review of the System Security Plan confirms the use of replication is not required, not permitted and the database is not configured for replication, this check is not a finding.

If any replication accounts are assigned DBA roles or roles with DBA privileges, this is a finding.

Check Content Reference

M

Target Key

4059

Comments