STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

If MariaDB authentication using passwords is employed, MariaDB must enforce the DOD standards for password lifetime.

DISA Rule

SV-253696r1018599_rule

Vulnerability Number

V-253696

Group Title

SRG-APP-000164-DB-000401

Rule Version

MADB-10-003750

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Locate the MariaDB Enterprise Server configuration file (mariadb-enterprise.cnf) that contains the password variables within /etc/my.cnf.d/. Edit the variables.

Example:

default_password_lifetime = 60

Check Contents

Check the default password lifetime variable to verify it matches the password requirement.

MariaDB> SHOW GLOBAL VARIABLES LIKE 'default_password_lifetime%';

If the value returned is not 60 or less, this is a finding.

Vulnerability Number

V-253696

Documentable

False

Rule Version

MADB-10-003750

Severity Override Guidance

Check the default password lifetime variable to verify it matches the password requirement.

MariaDB> SHOW GLOBAL VARIABLES LIKE 'default_password_lifetime%';

If the value returned is not 60 or less, this is a finding.

Check Content Reference

M

Target Key

5475