STIGQter STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

Default demonstration and sample databases, database objects, and applications must be removed.

DISA Rule

SV-253690r960963_rule

Vulnerability Number

V-253690

Group Title

SRG-APP-000141-DB-000090

Rule Version

MADB-10-003100

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

If a test database is found, this is a sign that the mysql_secure_installation script was not ran when the database software was installed. It is recommended to do so. This script will prompt the user to set the MariaDB root user's password, remove all anonymous users, disallow the root user from logging in remotely to the database, remove the test database and access to it, and then reload the privilege tables.

$ mariadb-secure-installation

reply Y to setting a root password if one is not already set.

reply Y to Remove anonymous users

reply Y to disallow root login remotely

reply Y to Remove test database and access to it

reply Y to Reload privilege tables now (this ensures that all changes made so far will take effect immediately)

Note: For this request only the "reply Y to Remove" test database and access to it is necessary, but "Y" to all the questions is recommended.

Alternatively, simply dropping the test database will remedy the finding.

MariaDB> DROP DATABASE test;

Check Contents

As the database administrator, show all databases by running the following SQL:

MariaDB> SHOW DATABASES;

Determine if the test database still exists. If it does, this is a finding.

Vulnerability Number

V-253690

Documentable

False

Rule Version

MADB-10-003100

Severity Override Guidance

As the database administrator, show all databases by running the following SQL:

MariaDB> SHOW DATABASES;

Determine if the test database still exists. If it does, this is a finding.

Check Content Reference

M

Target Key

5475