Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-219745 | O112-BP-026500 | SV-219745r401224_rule | Medium |
Description |
---|
Remote administration provides a potential opportunity for malicious users to make unauthorized changes to the Connection Manager configuration or interrupt its service. |
STIG | Date |
---|---|
Oracle Database 11.2g Security Technical Implementation Guide | 2021-04-05 |
Check Text ( C-21470r307084_chk ) |
---|
View the cman.ora file in the ORACLE_HOME/network/admin directory. If the file does not exist, the database is not accessed via Oracle Connection Manager and this check is Not a Finding. If the entry and value for REMOTE_ADMIN is not listed or is not set to a value of NO (REMOTE_ADMIN = NO), this is a Finding. |
Fix Text (F-21469r307085_fix) |
---|
View the cman.ora file in the ORACLE_HOME/network/admin directory of the Connection Manager. Include the following line in the file: REMOTE_ADMIN = NO |