Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Oracle MySQL 8.0 Security Technical Implementation Guide
SRG-APP-000495-DB-000329
The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify privileges/permissions occur.
The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify privileges/permissions occur.
An XCCDF Rule
Details
Profiles
Prose
The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify privileges/permissions occur.
Medium Severity
<VulnDiscussion>Failed attempts to change the permissions, privileges, and roles granted to users and roles must be tracked. Without an audit trail, unauthorized attempts to elevate or restrict individual and group privileges could go undetected. In an SQL environment, modifying permissions is typically done via the GRANT, REVOKE, and DENY commands. To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>