USNS MONTFORD POINT - Findings

Showing 1 unique vulnerabilities (1 total) (filtered) View Documentation Status (90 tracked)

V-206579 CAT II The DBMS must reveal detailed error messages only to the ISS...

1 asset 1 Closed Database Security Re...

Hostname	IP Address	Status	Assigned To	Last Scan	Actions
MONT-DB-002	-			2026-03-06
Finding Details No details recorded. Comments Non-privileged users do not have direct access to the DBMS where database error messages are displayed. Only Administrative users can see the error messages in the DBMS. The database server can only be accessed by a privileged user, who creates an Afloat Operations Service Desk ticket. Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days. Installer accounts are created and sent from shore.

Check Text

Check DBMS settings and custom database code to determine if detailed error messages are ever displayed to unauthorized individuals. If detailed error messages are displayed to individuals not authorized to view them, this is a finding.

Fix Text

Configure DBMS settings, custom database code, and associated application code not to display detailed error messages to those not authorized to view them.

Finding Details

Comments

Check Text

Fix Text