STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

MariaDB must associate organization-defined types of security labels having organization-defined security label values with information in process.

DISA Rule

SV-253720r1138541_rule

Vulnerability Number

V-253720

Group Title

SRG-APP-000313-DB-000309

Rule Version

MADB-10-006500

Severity

CAT II

CCI(s)

• CCI-002263 - Provides the means to associate organization-defined types of security attributes having organization-defined security attribute values with information in process.

Weight

10

Fix Recommendation

Add custom data structures, data elements and application code, to provide reliable security labeling of information in transmission. Write Custom Code: https://mariadb.com/resources/blog/protect-your-data-row-level-security-in-mariadb-10-0/

Check Contents

If security labeling is not required, this is not a finding.

If security labeling requirements have been specified, but the security labeling is not implemented or does not reliably maintain labels on information in process, this is a finding.

Vulnerability Number

V-253720

Documentable

False

Rule Version

MADB-10-006500

Severity Override Guidance

If security labeling is not required, this is not a finding.

If security labeling requirements have been specified, but the security labeling is not implemented or does not reliably maintain labels on information in process, this is a finding.

Check Content Reference

M

Target Key

5475