STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

MariaDB must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

DISA Rule

SV-253702r961047_rule

Vulnerability Number

V-253702

Group Title

SRG-APP-000178-DB-000083

Rule Version

MADB-10-004300

Severity

CAT I

CCI(s)

• CCI-000206 - Obscure feedback of authentication information during the authentication process to protect the information from possible exploitation and use by unauthorized individuals.

Weight

10

Fix Recommendation

When connecting to the database, the username and password are sent to the server via the command line interface or other connector interface. Using the command line interface, passing the -p or --password flags but not including the password in the command will prompt for the password and not display it on the screen as typed.

Example:

mariadb -u username -p

Check Contents

Verify best practices are documented and users trained to use the password command line interface flags appropriately.

For example, the command line option --password (or -p) prompts for a password to be entered and obscures feedback on the typed in password.

Ensure users are trained to use alternatives to command line password parameters, if they are not, this is a finding.

Vulnerability Number

V-253702

Documentable

False

Rule Version

MADB-10-004300

Severity Override Guidance

Verify best practices are documented and users trained to use the password command line interface flags appropriately.

For example, the command line option --password (or -p) prompts for a password to be entered and obscures feedback on the typed in password.

Ensure users are trained to use alternatives to command line password parameters, if they are not, this is a finding.

Check Content Reference

M

Target Key

5475