USNS MONTFORD POINT - Findings

Showing 1 unique vulnerabilities (1 total) (filtered) View Documentation Status (90 tracked)

V-206600 CAT II The DBMS must require users to reauthenticate when organizat...

1 asset 1 Closed Database Security Re...

Hostname	IP Address	Status	Assigned To	Last Scan	Actions
MONT-DB-002	-			2026-03-06
Finding Details No details recorded. Comments The DBMS requires reauthentication when changing role or escalating privileges. Creation of password-based installer accounts is initiated from shore and utilize the procedure SC_RemoteUserMaint. Password-based application accounts are created and maintained through the application using the procedure SC_UserMaint. Both procedures use the FORCE PASSWORD CHANGE ON clause when creating or altering a login.

Check Text

Review the system documentation and the configuration of the DBMS and related applications and tools. If there are any circumstances under which a user is not required to reauthenticate when changing role or escalating privileges, this is a finding. If the information owner has identified additional cases where reauthentication is needed, but there are circumstances where the system does not ask the user to reauthenticate when those cases occur, this is a finding.

Fix Text

Modify and/or configure the DBMS and related applications and tools so that users are always required to reauthenticate when changing role or escalating privileges. Modify and/or configure the DBMS and related applications and tools so that users are always required to reauthenticate when the specified cases needing reauthorization occur.

Finding Details

Comments

Check Text

Fix Text