Ensure Old Password Versions Are Not Used

Méthode de vérification

Méthode d'audit: Requête SQL

out=$(sqlplus -S -L / as sysdba 2>/dev/null <<'EOF'
whenever sqlerror exit failure
set heading off feedback off pagesize 0 verify off echo off trimspool on define off
select count(*) from cdb_users c
where not regexp_like(c.password_versions, '^\s*12C\s*$')
and c.username not in ('SYS');
exit
EOF
) || exit 1
printf '%s\n' "$out"

Sortie attendue

0

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Follow the process "Finding and Resetting User Passwords That Use the 10G Password Version" as outlined in the Oracle Database Upgrade Guide to reset affected user passwords and enforce 12c password versioning. ; Identify users with old password versions. ; Ensure that SQLNET.ALLOWED_LOGON_VERSION_SERVER is set to 12a. ; Reset their passwords using the ALTER USER command.

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

tmaegis scan --target oracle-db