STIGQter: STIG Summary: MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

When updates are applied to MongoDB software, any software components that have been replaced or made unnecessary must be removed.

DISA Rule

SV-279391r1179488_rule

Vulnerability Number

V-279391

Group Title

SRG-APP-000454-DB-000389

Rule Version

MD8X-00-008700

Severity

CAT II

CCI(s)

CCI-002617 - Remove previous versions of organization-defined software components after updated versions have been installed.

Weight

Fix Recommendation

It is recommended to use the official installation packages provided by MongoDB. In the event the software was installed manually and permissions need to be restricted, consider a clean reinstallation.

Review this organizational or site-specific document to determine how and where MongoDB is to be installed on the system. Using this documentation, verify that MongoDB has been installed on the system prior to upgrading.

To verify the version of MongoDB Enterprise Server, run the following command in the directory where the MongoDB executable binary has been placed according to the organizational or site-specific documentation.

> cd <mongod binary directory>
> ./mongod --version

The output will show the version and architecture of the MongoDB Server binary similar to the following:

db version v8.0.8
Build Info: {
"version": "8.0.8",
"gitVersion": "7f52660c14217ed2c8d3240f823a2291a4fe6abd",
"openSSLVersion": "OpenSSL 3.2.2 4 Jun 2024",
"modules": [
"enterprise"
],
"allocator": "tcmalloc-google",
"environment": {
"distmod": "rhel93",
"distarch": "x86_64",
"target_arch": "x86_64"
}
}

Verify the version desired (what the upgraded version should be) matches what is shown in the output.

If the version is not what is expected, then remove the mongod binary from the system to prevent it from being used and consult the organizational or site-specific documents for further guidance.

Run the following commands as an operating system administrator to remove the MongoDB Enterprise Server binary from the system:

> cd <mongod binary directory>
> rm ./mongod

Check Contents

Run the following command and observe the output. This command will determine if MongoDB has been installed with a package manager (RedHat) and display what version is currently installed:

> rpm -q mongodb-enterprise-server.x86_64
mongodb-enterprise-server-8.0.8-1.el9.x86_64

The output of the command above indicates that MongoDB Enterprise Server has been installed with a package manager.

In the preceding output is an example showing that MongoDB Enterprise Server Version 8.0.8 is installed. The specific version will be dependent on the actual version installed. Upgrading MongoDB with the same package manager used for installation will overwrite or remove files as part of the upgrade process.

If MongoDB was installed with a Package Manager (YUM/RPM for RedHat) then this is not a finding.

Run the following command and observe the output:

> rpm -q mongodb-enterprise-server.x86_64
package mongodb-enterprise-server.x86_64 is not installed

The output of the command above indicates that MongoDB has not been installed via a package manager or may not have been installed at all.

If MongoDB has not been installed with a Package Manger (YUM/RPM for RedHat), this is a finding.

Vulnerability Number

V-279391

Documentable

False

Rule Version

MD8X-00-008700

Severity Override Guidance

Check Content Reference

Target Key

5728