STIGQter: STIG Summary: Tanium 7.x Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

The access to the Tanium SQL database must be restricted. Only the designated database administrator(s) can have elevated privileges to the Tanium SQL database.

DISA Rule

SV-253834r1015847_rule

Vulnerability Number

V-253834

Group Title

SRG-APP-000381

Rule Version

TANS-DB-000003

Severity

CAT II

CCI(s)

• CCI-003938 - Automatically generate audit records of the enforcement actions.

Weight

10

Fix Recommendation

1. Access the Tanium SQL server interactively.

2. Log on to the server with an account that has administrative privileges.

3. Open SQL Server Management Studio.

4. Connect to a Tanium instance of SQL Server.

5. In the left pane, click "Databases".

6. Select the Tanium database.

7. Click "Security".

8. Click "Users".

9. In the "Users" pane, review the roles assigned to the user accounts. (Note: This does not apply to service accounts.)

10. Select the Tanium_archive database.

11. Click "Security".

12. Click "Users".

13. Adjust user roles as necessary. (Note: This does not apply to service accounts.)

Check Contents

1. Access the Tanium SQL server interactively.

2. Log on to the server with an account that has administrative privileges.

3. Open SQL Server Management Studio.

4. Connect to a Tanium instance of SQL Server.

5. In the left pane, click "Databases".

6. Select the Tanium database.

7. Click "Security".

8. Click "Users".

9. In the "Users" pane, review the roles assigned to the user accounts. (Note: This does not apply to service accounts.)

10. Select the Tanium_archive database.

11. Click "Security".

12. Click "Users".

13. In the "Users" pane, review the roles assigned to the user accounts. (Note: This does not apply to service accounts.)

If any user account has an elevated privilege role other than the assigned database administrators, this is a finding.

Vulnerability Number

V-253834

Documentable

False

Rule Version

TANS-DB-000003

Severity Override Guidance

1. Access the Tanium SQL server interactively.

2. Log on to the server with an account that has administrative privileges.

3. Open SQL Server Management Studio.

4. Connect to a Tanium instance of SQL Server.

5. In the left pane, click "Databases".

6. Select the Tanium database.

7. Click "Security".

8. Click "Users".

9. In the "Users" pane, review the roles assigned to the user accounts. (Note: This does not apply to service accounts.)

10. Select the Tanium_archive database.

11. Click "Security".

12. Click "Users".

13. In the "Users" pane, review the roles assigned to the user accounts. (Note: This does not apply to service accounts.)

If any user account has an elevated privilege role other than the assigned database administrators, this is a finding.

Check Content Reference

M

Target Key

5476