USNS MONTFORD POINT - Findings

Showing 1 unique vulnerabilities (1 total) (filtered) View Documentation Status (90 tracked)

V-206586 CAT II The DBMS must prevent non-privileged users from executing pr...

1 asset 1 Closed Database Security Re...

Hostname	IP Address	Status	Assigned To	Last Scan	Actions
MONT-DB-002	-			2026-03-06
Finding Details No details recorded. Comments Prohibiting non-privileged user from executing privileged functions is documented in Section 6.10 of the MSC IBS Access Control Policy 2.2. DBMS prevents non-privileged users from executing privileged functions through Roles. Non-privileged users do not have direct access the DBMS as it resides in a secure location. The database server can only be accessed by a privileged user, who creates an Afloat Operations Service Desk ticket. Once the Afloat Operations Service Desk confirms the privileged user has the proper credentials, a domain admin account is created for the user and is valid for 14 days. Installer accounts are created and sent from shore.

Check Text

Review the system documentation to obtain the definition of the database/DBMS functionality considered privileged in the context of the system in question. Review the DBMS security configuration and/or other means used to protect privileged functionality from unauthorized use. If the configuration does not protect all of the actions defined as privileged, this is a finding.

Fix Text

Configure DBMS security to protect all privileged functionality.

Finding Details

Comments

Check Text

Fix Text