USNS MONTFORD POINT - Findings

Showing 1 unique vulnerabilities (1 total) (filtered) View Documentation Status (90 tracked)

V-206609 CAT II When invalid inputs are received, the DBMS must behave in a ...

1 asset 1 Closed Database Security Re...

Hostname	IP Address	Status	Assigned To	Last Scan	Actions
MONT-DB-002	-			2026-03-06
Finding Details No details recorded. Comments Application-specific logic is implemented within the database using stored procedures, functions and triggers, where appropriate. Invalid inputs return appropriate error messages and statement execution is not committed to the database. Database code does properly validate data before it is put into the database or acted upon by the database. Development team confirms that code accounts for invalid inputs by capturing error codes and returning appropriate error messages to the user for corrective action.

Check Text

Review system documentation to determine how input errors are to be handled in general and if any special handling is defined for specific circumstances. Review the source code for database program objects (stored procedures, functions, triggers) and application source code to identify how the system responds to invalid input. If it does not implement the documented behavior, this is a finding.

Fix Text

Revise and deploy the source code for database program objects (stored procedures, functions, triggers) and application source code, to implement the documented behavior.

Finding Details

Comments

Check Text

Fix Text