STIGQter: STIG Summary: Oracle Database 19c Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 01 Apr 2026:

System Privileges must not be granted to PUBLIC.

DISA Rule

SV-270528r1064862_rule

Vulnerability Number

V-270528

Group Title

SRG-APP-000516-DB-000363

Rule Version

O19C-00-009600

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Revoke any system privileges assigned to PUBLIC:

From SQL*Plus:

revoke [system privilege] from PUBLIC;

Replace [system privilege] with the named system privilege.

Note: System privileges are not granted to PUBLIC by default and would indicate a custom action.

Check Contents

From SQL*Plus:

Select privilege from dba_sys_privs where grantee = 'PUBLIC';

If any records are returned, this is a finding.

Vulnerability Number

V-270528

Documentable

False

Rule Version

O19C-00-009600

Severity Override Guidance

From SQL*Plus:

Select privilege from dba_sys_privs where grantee = 'PUBLIC';

If any records are returned, this is a finding.

Check Content Reference

Target Key

5672