Remote administration must be disabled for the Oracle connection manager.
An XCCDF Rule
Description
Remote administration provides a potential opportunity for malicious users to make unauthorized changes to the Connection Manager configuration or interrupt its service.
- ID
- SV-219745r879887_rule
- Version
- O112-BP-026500
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
View the cman.ora file in the ORACLE_HOME/network/admin directory of the Connection Manager.
Include the following line in the file:
REMOTE_ADMIN = NO