STIGQter: STIG Summary: MarkLogic Server v9 Security Technical Implementation Guide Version: 3 Release: 2 Benchmark Date: 24 Oct 2024:

Access to external executables must be disabled or restricted.

DISA Rule

SV-220361r960963_rule

Vulnerability Number

V-220361

Group Title

SRG-APP-000141-DB-000093

Rule Version

ML09-00-003300

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

If the use of the included external executables (MLSQL/odbc and/or CONVERT) is not authorized by the ISSO then remove the executables from the MarkLogic installation directory, find the executables by name for the different operating systems.

To remove Converters, issue the following command at a command prompt with a user that has administrative privileges.
> sudo yum remove MarkLogicConverters

To remove MLSQL/odbc client, issue the following command at a command prompt with a user that has administrative privileges.
> sudo yum info mlsqlodbc

Check Contents

Verify whether external executables are being used. If so, check with the ISSO to determine if the use of the external executables (MLSQL/odbc client and Converters) is authorized.

If it is not, this is a finding.

To check for Converters, issue the following command at a command prompt with a user that has administrative privileges.
> sudo yum info MarkLogicConverters

If the command returns information on the version of MarkLogic converters installed, and use of this package has not been authorized, this is a finding.

To check for MLSQL/odbc client, issue the following command at a command prompt with a user that has administrative privileges.
> sudo yum info mlsqlodbc

If the command returns information on the version of MLSQL odbc client install, and use of this package has not been authorized, this is a finding.

Vulnerability Number

V-220361

Documentable

False

Rule Version

ML09-00-003300

Severity Override Guidance

Verify whether external executables are being used. If so, check with the ISSO to determine if the use of the external executables (MLSQL/odbc client and Converters) is authorized.

If it is not, this is a finding.

To check for Converters, issue the following command at a command prompt with a user that has administrative privileges.
> sudo yum info MarkLogicConverters

If the command returns information on the version of MarkLogic converters installed, and use of this package has not been authorized, this is a finding.

To check for MLSQL/odbc client, issue the following command at a command prompt with a user that has administrative privileges.
> sudo yum info mlsqlodbc

If the command returns information on the version of MLSQL odbc client install, and use of this package has not been authorized, this is a finding.

Check Content Reference

M

Target Key

4064