STIGQter STIGQter: STIG Summary: MongoDB Enterprise Advanced 7.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

MongoDB must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values.

DISA Rule

SV-265925r1043181_rule

Vulnerability Number

V-265925

Group Title

SRG-APP-000224-DB-000384

Rule Version

MD7X-00-004900

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Edit the MongoDB configuration file to ensure the "net.tls.mode" option is included and set to the value "requireTLS" as shown below:

net:
tls:
mode: requireTLS

Restart the MongoDB service from the OS

$ sudo systemctl restart mongod

Further documentation is here:
https://www.mongodb.com/docs/v7.0/tutorial/configure-ssl/

Check Contents

Check the MongoDB configuration file (default location: /etc/mongod.conf).

The following option must be present ( "net.tls.mode") and set to "requireTLS":

net:
tls:
mode: requireTLS

If this is not found in the MongoDB configuration file, this is a finding.

Vulnerability Number

V-265925

Documentable

False

Rule Version

MD7X-00-004900

Severity Override Guidance

Check the MongoDB configuration file (default location: /etc/mongod.conf).

The following option must be present ( "net.tls.mode") and set to "requireTLS":

net:
tls:
mode: requireTLS

If this is not found in the MongoDB configuration file, this is a finding.

Check Content Reference

M

Target Key

5637