STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

If MariaDB authentication, using passwords, is employed, then MariaDB must enforce the DOD standards for password complexity.

DISA Rule

SV-253695r1018598_rule

Vulnerability Number

V-253695

Group Title

SRG-APP-000164-DB-000401

Rule Version

MADB-10-003700

Severity

CAT I

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Locate the MariaDB Enterprise Server configuration file (mariadb-enterprise.cnf) which contains the simple_password_check plugin variables within /etc/my.cnf.d/. Edit the variables.

Example:

simple_password_check_digits = 2
simple_password_check_letters_same_case = 2
simple_password_check_minimal_length = 15
simple_password_check_other_characters = 2

Check Contents

Check the simple_password_check plugin variables to ensure they match the password requirements.

MariaDB> SHOW GLOBAL VARIABLES LIKE 'simple_password_check_%';

Determine whether the following rules are enforced. If they do not meet the following password requirements, this is a finding.

a. minimum of 15 characters, including at least one of each of the following character sets:
- Uppercase
- Lowercase
- Numerics
- Special characters (e.g., ~ ! @ # $ % ^ & * ( ) _ + = - ' [ ] / ? > <)

b. Minimum number of characters changed from previous password: 50 percent of the minimum password length; that is, eight.

Vulnerability Number

V-253695

Documentable

False

Rule Version

MADB-10-003700

Severity Override Guidance

Check the simple_password_check plugin variables to ensure they match the password requirements.

MariaDB> SHOW GLOBAL VARIABLES LIKE 'simple_password_check_%';

Determine whether the following rules are enforced. If they do not meet the following password requirements, this is a finding.

a. minimum of 15 characters, including at least one of each of the following character sets:
- Uppercase
- Lowercase
- Numerics
- Special characters (e.g., ~ ! @ # $ % ^ & * ( ) _ + = - ' [ ] / ? > <)

b. Minimum number of characters changed from previous password: 50 percent of the minimum password length; that is, eight.

Check Content Reference

M

Target Key

5475