Скачать или смотреть ORACLE 12C/19C FEDRAL SECURITY | Security Technical Implementation Guides (STIGs) | Zero Trust

ORACLE 12C/19C FEDRAL SECURITY | Security Technical Implementation Guides (STIGs) | Zero Trust

V-61425 high The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.
V-61427 high The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.
V-61441 high The Oracle Listener must be configured to require administration authentication.
V-61537 high DBA OS accounts must be granted only those host system privileges necessary for the administration of the DBMS.
V-61539 high Oracle software must be evaluated and patched against newly found vulnerabilities.
V-61541 high DBMS default accounts must be assigned custom passwords.
V-61543 high The DBMS, when using PKI-based authentication, must enforce authorized access to the corresponding private key.
V-61545 high The DBMS must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures.
V-61843 high Applications must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.
V-61845 high When using command-line tools such as Oracle SQL*Plus, which can accept a plain-text password, users must use an alternative logon method that does not expose the password.
V-61865 high Use of the DBMS software installation account must be restricted.
V-61873 high The DBMS software installation account must be restricted to authorized users.