STIGQter STIGQter: STIG Summary: Oracle Database 19c Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 01 Apr 2026:

Oracle Database must separate user functionality (including user interface services) from database management functionality.

DISA Rule

SV-270572r1137655_rule

Vulnerability Number

V-270572

Group Title

SRG-APP-000211-DB-000122

Rule Version

O19C-00-016100

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure DBMS settings to separate database administration and general user functionality. Provide those who have both administrative and general-user responsibilities with separate accounts for these separate functions.

This includes separation of duties for administrative users, schema owners, and application (general) users. Oracle's recommendation is Oracle Database Vault to solve this problem.

Oracle Database Vault provides controls to prevent unauthorized privileged users from accessing sensitive data and to prevent unauthorized database changes. Oracle Database Vault provides database roles that enable different users to perform specific tasks, based on separation-of-duty guidelines. One of the biggest benefits resulting from regulatory compliance has been security awareness. Oracle Database Vault helps DBAs design flexible security policies for their database.

Check Contents

Check DBMS settings and vendor documentation to verify administrative functionality is separate from user functionality.

If administrator and general user functionality is not separated either physically or logically, this is a finding.

Vulnerability Number

V-270572

Documentable

False

Rule Version

O19C-00-016100

Severity Override Guidance

Check DBMS settings and vendor documentation to verify administrative functionality is separate from user functionality.

If administrator and general user functionality is not separated either physically or logically, this is a finding.

Check Content Reference

M

Target Key

5672