A unique database name and a unique MySQL user with a secure password must be created for use in Jamf Pro EMM.
An XCCDF Rule
Description
If the default MySQL database name and password are not changed an adversary could gain unauthorized access to the application which could lead to the compromise of sensitive DOD data. SFR ID: FMT_SMF.1(2)b. / IA-5(1)(c) Satisfies: SRG-APP-000171
- ID
- SV-241800r1015735_rule
- Version
- JAMF-10-100080
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Create a unique database name and a unique MySQL user with a secure password. The procedure is found in the following Jamf Knowledge Base article:
https://www.jamf.com/jamf-nation/articles/542/title