STIGUI
V-234076CAT II — Medium severitySV-234076r612749_rule

SQL stored queries or procedures installed during Tanium installation must be removed from the Tanium Server.

Rule version TANS-DB-000006 · STIG v2 · 2021-12-20

Discussion

Failure to protect organizational information from data mining may result in a compromise of information.

Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example: limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.

Check

Access the Tanium Server interactively.

Log on to the server with an account that has administrative privileges.

Navigate to Program Files >> Tanium >> Tanium Server.

If any SQL stored queries (.sql files) or procedures are found, this is a finding.

Fix

Access the Tanium Server interactively.

Log on to the server with an account that has administrative privileges.

Navigate to Program Files >> Tanium >> Tanium Server.

Remove the SQL stored queries (.sql files) or procedures from the folder.

Identifiers

Group ID
V-234076
Group title
SRG-APP-000454
Rule ID
SV-234076r612749_rule
Check ID
C-37261r610728_chk
Fix ID
F-37226r610729_fix