STIGQter: STIG Summary: Oracle MySQL 8.0 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 24 Oct 2024:

MySQL database products must be a version supported by the vendor.

DISA Rule

SV-265876r999534_rule

Vulnerability Number

V-265876

Group Title

SRG-APP-000456-DB-000400

Rule Version

MYS8-00-012600

Severity

CAT I

CCI(s)

• CCI-003376 - Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer.

Weight

10

Fix Recommendation

Remove or decommission all unsupported software products.

Upgrade unsupported DBMS or unsupported components to a supported version of the product.

Check Contents

Review the version and release information.

To check the version of the installed MySQL, run the following SQL statement:

select @@version;

The result will show the version. For example:
8.0.22-commercial

Access the vendor website or use other means to verify the version is still supported.
Oracle lifetime support:
https://www.oracle.com/us/assets/lifetime-support-technology-069183.pdf
Scroll down to Oracle MySQL Releases (approximately page 28).

If the Oracle MySQL version or any of the software components are not supported by the vendor, this is a finding.

Vulnerability Number

V-265876

Documentable

False

Rule Version

MYS8-00-012600

Severity Override Guidance

Review the version and release information.

To check the version of the installed MySQL, run the following SQL statement:

select @@version;

The result will show the version. For example:
8.0.22-commercial

Access the vendor website or use other means to verify the version is still supported.
Oracle lifetime support:
https://www.oracle.com/us/assets/lifetime-support-technology-069183.pdf
Scroll down to Oracle MySQL Releases (approximately page 28).

If the Oracle MySQL version or any of the software components are not supported by the vendor, this is a finding.

Check Content Reference

M

Target Key

5277