STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

Unused database components, DBMS software, and database objects must be removed.

DISA Rule

SV-253691r960963_rule

Vulnerability Number

V-253691

Group Title

SRG-APP-000141-DB-000091

Rule Version

MADB-10-003200

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

To uninstall the plugin but leave the libraries in place:

MariaDB> UNINSTALL PLUGIN plugin_name;

To uninstall the plugin and the associated libraries:

MariaDB> UNINSTALL SONAME plugin_name;

Check Contents

List all plugins and determine which are acceptable.

MariaDB> SHOW PLUGINS;

If unused plugins are installed and are not documented and authorized, this is a finding.

Vulnerability Number

V-253691

Documentable

False

Rule Version

MADB-10-003200

Severity Override Guidance

List all plugins and determine which are acceptable.

MariaDB> SHOW PLUGINS;

If unused plugins are installed and are not documented and authorized, this is a finding.

Check Content Reference

M

Target Key

5475