V-206618
CAT IIThe DBMS must generate audit records when privileges/permissions are modified.
- Ships Affected
- 1
- Total Findings
- 1
- Open
- 0
- Closed
- 1
Check Text
If there is no distinction in the DBMS's security architecture between modifying permissions on the one hand, and adding and deleting permissions on the other hand, this is not a finding.
Review DBMS documentation to verify that audit records can be produced when privileges/permissions/role memberships are modified.
If the DBMS is not capable of this, this is a finding.
Review the DBMS/database security and audit configurations to verify that audit records are produced when privileges/permissions/role memberships are modified.
If they are not produced, this is a finding.
Fix Text
Deploy a DBMS capable of producing the required audit records when privileges/permissions/role memberships are modified.
Configure the DBMS to produce audit records when privileges/permissions/role memberships are modified.
STIG Reference
- STIG
- Database Security Requirements Guide
- Version
- 4
- Release
- 5
- Rule ID
- SV-206618r961800_rule
All Occurrences
This vulnerability appears on 1 ship(s)
| Ship | Hull # | Source File | Status | Assigned To | Scan Date | Actions |
|---|---|---|---|---|---|---|
| USNS MONTFORD POINT | T-ESD-1 | Montford Point ShipCLIP DB V4R4.ckl | Unassigned | 2026-03-06T12:50:21.809591 | View in Context |