Oracle instance names must not contain Oracle version numbers.
An XCCDF Rule
Description
Service names may be discovered by unauthenticated users. If the service name includes version numbers or other database product information, a malicious user may use that information to develop a targeted attack.
- ID
- SV-219696r879887_rule
- Version
- O112-BP-021300
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Follow the instructions in Oracle MetaLink Note 15390.1 (and related documents) to change the SID for the database without re-creating the database to a value that does not identify the Oracle version.