STIGQter: STIG Summary: IBM DB2 V10.5 LUW Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 25 Oct 2019:

Default demonstration and sample databases, database objects, and applications must be removed.

DISA Rule

SV-89151r1_rule

Vulnerability Number

V-74477

Group Title

SRG-APP-000141-DB-000090

Rule Version

DB2X-00-003400

Severity

CAT II

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Run the following command to DROP the SAMPLE database:

$db2 drop database sample

Check Contents

Use the list db directory to see if the SAMPLE database exists.

$db2 list db directory

If the SAMPLE database exists, this is a finding.

Vulnerability Number

V-74477

Documentable

False

Rule Version

DB2X-00-003400

Severity Override Guidance

Use the list db directory to see if the SAMPLE database exists.

$db2 list db directory

If the SAMPLE database exists, this is a finding.

Check Content Reference

M

Target Key

3161

Comments