STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 26 Jul 2023:

VMware Postgres must require authentication on all connections.

DISA Rule

SV-256599r887583_rule

Vulnerability Number

V-256599

Group Title

SRG-APP-000148-DB-000103

Rule Version

VCPG-70-000009

Severity

CAT III

CCI(s)

CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

Fix Recommendation

Navigate to and open /storage/db/pgdata/pg_hba.conf.

Find and remove the line that has a method of "trust" in the far-right column.

A correct, typical line will look like the following:

# TYPE DATABASE USER ADDRESS METHOD
host all all 127.0.0.1/32 md5

Check Contents

At the command prompt, run the following command:

# grep -v "^#" /storage/db/vpostgres/pg_hba.conf|grep -z --color=always "trust"

If any lines are returned, this is a finding.

Vulnerability Number

V-256599

Documentable

False

Rule Version

VCPG-70-000009

Severity Override Guidance

At the command prompt, run the following command:

# grep -v "^#" /storage/db/vpostgres/pg_hba.conf|grep -z --color=always "trust"

If any lines are returned, this is a finding.

Check Content Reference

Target Key

5521