STIGQter: STIG Summary: MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

MongoDB must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.

DISA Rule

SV-279382r1179313_rule

Vulnerability Number

V-279382

Group Title

SRG-APP-000383-DB-000364

Rule Version

MD8X-00-007600

Severity

CAT II

CCI(s)

• CCI-001762 - Disable or remove organization-defined functions, ports, protocols, software, and services within the system deemed to be unnecessary and/or nonsecure.

Weight

10

Fix Recommendation

Disable each prohibited network function, port, protocol, or service prohibited by the PPSM guidance.

More information for MongoDB port management can be found at the following link:
https://www.mongodb.com/docs/manual/reference/default-mongodb-port/

Check Contents

Review the network functions, ports, protocols, and services supported by the database management system (DBMS).

If any protocol is prohibited by the PPSM guidance and is enabled, this is a finding.

Vulnerability Number

V-279382

Documentable

False

Rule Version

MD8X-00-007600

Severity Override Guidance

Review the network functions, ports, protocols, and services supported by the database management system (DBMS).

If any protocol is prohibited by the PPSM guidance and is enabled, this is a finding.

Check Content Reference

M

Target Key

5728