STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

MariaDB must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values.

DISA Rule

SV-253707r1043181_rule

Vulnerability Number

V-253707

Group Title

SRG-APP-000224-DB-000384

Rule Version

MADB-10-004900

Severity

CAT II

CCI(s)

CCI-001188 - Generate a unique session identifier for each session with organization-defined randomness requirements.

Weight

Fix Recommendation

Modify the MariaDB configuration file located within /etc/my.cnf.d/ and set the variable require_secure_transport to "ON" under the server section. Restart MariaDB Enterprise Server.

Example:

[server]
require_secure_transport = ON

Check Contents

Determine if MariaDB is configured to require SSL.

MariaDB> SHOW GLOBAL VARIABLES LIKE 'require_secure_transport';

If require_secure_transport is not "ON", this is a finding.

Vulnerability Number

V-253707

Documentable

False

Rule Version

MADB-10-004900

Severity Override Guidance

Determine if MariaDB is configured to require SSL.

MariaDB> SHOW GLOBAL VARIABLES LIKE 'require_secure_transport';

If require_secure_transport is not "ON", this is a finding.

Check Content Reference

Target Key

5475