STIGQter STIGQter: STIG Summary: MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

MongoDB must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values.

DISA Rule

SV-279358r1179465_rule

Vulnerability Number

V-279358

Group Title

SRG-APP-000224-DB-000384

Rule Version

MD8X-00-004700

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Edit the MongoDB configuration file to ensure the "net.tls.mode" option is included and set to the value "requireTLS" as shown below:

net:
tls:
mode: requireTLS

Restart the MongoDB service from the OS.

$ sudo systemctl restart mongod

Further documentation is available at:
https://www.mongodb.com/docs/v8.0/tutorial/configure-ssl/

Check Contents

Check the MongoDB configuration file (default location /etc/mongod.conf).

The following option must be present ( "net.tls.mode") and set to "requireTLS":

net:
tls:
mode: requireTLS

If this is not found in the MongoDB configuration file, this is a finding.

Vulnerability Number

V-279358

Documentable

False

Rule Version

MD8X-00-004700

Severity Override Guidance

Check the MongoDB configuration file (default location /etc/mongod.conf).

The following option must be present ( "net.tls.mode") and set to "requireTLS":

net:
tls:
mode: requireTLS

If this is not found in the MongoDB configuration file, this is a finding.

Check Content Reference

M

Target Key

5728