USNS MONTFORD POINT - Findings

Showing 1 of 1 findings (filtered) View Documentation Status (90 tracked)

Vuln ID	Severity	Asset	STIG	Title	Status	Doc Status	Assigned To	Actions
V-206567	CAT II	MONT-DB-002	Database Security Requirements Guide	The DBMS must maintain the authenticity of communi...		-
Check Text Review DBMS vendor documentation and system behavior (and if necessary, consult vendor representatives) to determine whether the DBMS can provide demonstrably effective protection against man-in-the-middle attacks that guess at session identifier values. If not, this is a finding. Review DBMS settings to determine whether protections against man-in-the-middle attacks that guess at session identifier values are enabled. If they are not, this is a finding. Fix Text Utilize a DBMS product that can provide demonstrably effective protection against man-in-the-middle attacks that guess at session identifier values. Configure DBMS settings to enable protections against man-in-the-middle attacks that guess at session identifier values. Comments Database or application connections transmit data using TLS in-transit encryption which guard against man-in-the-middle attacks. In-transit encryption is configured in the smisdbs17-E.cfg file using the -ec option and specifying the identity path+filename of the obfuscated TLS configuration file. The DBMS is not accessible by direct remote connection or URL. Source: Montford Point ShipCLIP DB V4R4.ckl Scan Date: 2026-03-06T12:50:21.809591 Technology Area: Database Review