Download
| Alert*
CCE-19517-2
Database application permissions allowing DDL statements to modify the application schema for a specified database should be configured appropriately. CCE-19687-3 DBMS privileges to restore database data or other DBMS configurations, features or objects in a specified database should be configured appropriately. CCE-19971-1 The SQL Server Service for a specified instance should be configure appropriately. CCE-19822-6 Permissions using the WITH GRANT OPTION for a specified database should be configured appropriately CCE-19649-3 Permissions on system tables for a specified database should be configured appropriately CCE-19361-5 Access extended stored procedure xp_cmdshell should be configured appropriately CCE-19781-4 C2 Audit records should be configured appropriately CCE-19935-6 The SQL Server Agent account should be configured appropriately. CCE-19749-1 Remote DBMS administration should be enabled or disabled as appropriate. CCE-19735-0 Access to registry exended stored procedures should be configured appropriately. CCE-19816-8 Application object owner accounts for a specified database should be configured appropriately. CCE-19835-8 Remote access should be configured appropriately CCE-19831-7 The SQL Server Database Service account should be configured appropriately. CCE-20013-9 Application object owner accounts for a specified database should be enabled or disabled as appropriate. CCE-19448-0 Custom and GOTS application source code for a specified databased should be encrypted or not encrypted as appropriate. CCE-19147-8 Default demonstration and sample database objects and applications should be available or removed as appropriate. CCE-19989-3 SQL Server authentication should be configured appropriately. CCE-19909-1 Required auditing parameters for database auditing should be set appropriately CCE-19926-5 DDL permissions for a specified database and specified account should be configured appropriately CCE-19220-3 Object permissions assigned to PUBLIC or GUEST for a specified database should be configured appropriately. CCE-19788-9 SQL Server event forwarding should be configured appropriately CCE-19289-8 OLE Automation extended stored procedures should be configured appropriately. CCE-19392-0 DBMS login account password complexity requirements should be configured appropriately CCE-19498-5 Error log retention should be configured appropriately. CCE-19886-1 Access to DBMS software files and directories should be configured appropriately. CCE-19930-7 The xp_cmdshell should be enabled or disabled as appropriate. CCE-19784-8 The SQL Mail XPs should be enabled or disabled as appropriate. CCE-19734-3 Trace rollover should be configured appropriately. CCE-19277-3 SQL Server registry keys and sub-keys permissions should be configured appropriately. CCE-19855-6 Named Pipes network protocol should be configured appropriately. CCE-19857-2 Passwords for DBMS default accounts should be set appropriately CCE-19398-7 Access to CmdExec and ActiveScripting jobs should be configured appropriately. |