Ensure the appropriate MongoDB software version/patches are installed

СреднийУровень 1Ручная проверкаmongodb

Описание

The MongoDB installation version, along with the patch level, should be the most recent that is compatible with the organization's operational needs. In addition, regularly view latest minor security patch updates for security vulnerability fixes (CVE Related) from MongoDB website: https://www.mongodb.com/alerts

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Run mongod --version (Windows: mongod.exe --version) and db.version() in mongosh. Compare the running release with the MongoDB supported-versions and security-advisory pages; the version must be supported and carry the latest patch release your organisation has approved.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Upgrade to the latest version of the MongoDB software: 1. Backup the data set. 2. Download the binaries for the latest MongoDB revision from the MongoDB Download Page and store the binaries in a temporary location. The binaries download as compressed files that extract to the directory structure used by the MongoDB installation. 3. Shutdown the MongoDB instance. 4. Replace the existing MongoDB binaries with the downloaded binaries. 5.

Свойства

Операционные системы: Любая
Теги: mongodbpatching
Источник: CIS MongoDB 8 Benchmark v2.0.0 - 1.1 Ensure the appropriate MongoDB software version/patches are installed