STIGQter: STIG Summary: Microsoft SQL Server 2022 Instance Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SQL Server must maintain a separate execution domain for each executing process.

DISA Rule

SV-271359r1137659_rule

Vulnerability Number

V-271359

Group Title

SRG-APP-000431-DB-000388

Rule Version

SQLI-22-012300

Severity

CAT II

CCI(s)

• CCI-002530 - Maintain a separate execution domain for each executing system process.

Weight

10

Fix Recommendation

Disable use of or remove any CLR code that is not authorized.

To disable the use of CLR, from the query prompt:
EXEC SP_CONFIGURE 'clr enabled', 0;
RECONFIGURE WITH OVERRIDE;

Check Contents

Review the server documentation to determine whether use of CLR assemblies is required. Run the following query to determine whether CLR is enabled for the instance:
SELECT name, value, value_in_use
FROM sys.configurations
WHERE name = 'clr enabled'

If "value_in_use" is a "1" and CLR is not required, this is a finding.

Vulnerability Number

V-271359

Documentable

False

Rule Version

SQLI-22-012300

Severity Override Guidance

Review the server documentation to determine whether use of CLR assemblies is required. Run the following query to determine whether CLR is enabled for the instance:
SELECT name, value, value_in_use
FROM sys.configurations
WHERE name = 'clr enabled'

If "value_in_use" is a "1" and CLR is not required, this is a finding.

Check Content Reference

M

Target Key

5677