STIGQter: STIG Summary: EDB Postgres Advanced Server v11 on Windows Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The EDB Postgres Advanced Server must isolate security functions from non-security functions.

DISA Rule

SV-224179r508023_rule

Vulnerability Number

V-224179

Group Title

SRG-APP-000233-DB-000124

Rule Version

EP11-00-005800

Severity

CAT II

CCI(s)

• CCI-001084 - The information system isolates security functions from nonsecurity functions.

Weight

10

Fix Recommendation

Remove all application-specific packages that were added to the sys, pg_catalog, information_schema, and dbo schemas.

Check Contents

All PPAS built-in security packages are in the sys, pg_catalog, information_schema, and dbo schemas.

If any application-specific packages have been added to these schemas, this is a finding.

Vulnerability Number

V-224179

Documentable

False

Rule Version

EP11-00-005800

Severity Override Guidance

All PPAS built-in security packages are in the sys, pg_catalog, information_schema, and dbo schemas.

If any application-specific packages have been added to these schemas, this is a finding.

Check Content Reference

M

Target Key

4107

Comments