Ensure Weak Protocols are Disabled

VisokaNivo 1Automatskamongodb

Opis

Servers can be configured to disable specific TLS/SSL protocol versions which may be vulnerable to exploitation and/or lack features which improve the level of security as provided by newer versions of the protocol. Checks the YAML config file /etc/mongod.conf (SKIP when it does not exist).

Kako se proverava

Metod provere: Obrazac u datoteci

Datoteka: /etc/mongod.conf
Obrazac: (?m)^[ \t]*(?:disabledProtocols|sslDisabledProtocols):[^\n]*(?:TLS1_0[^\n]*TLS1_1|TLS1_1[^\n]*TLS1_0)

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Set net.tls.disabledProtocols: TLS1_0,TLS1_1 in /etc/mongod.conf (or start with --tlsDisabledProtocols TLS1_0,TLS1_1) and restart mongod.

Svojstva

Operativni sistemi: Bilo koji
Oznake: mongodbtlsencryption
Referenca: CIS MongoDB 8 Benchmark v2.0.0 - 4.2 Ensure Weak Protocols are Disabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target mongodb