Ensure All Default Passwords Are Changed

Kako se proverava

Metod provere: SQL upit

out=$(sqlplus -S -L / as sysdba 2>/dev/null <<'EOF'
whenever sqlerror exit failure
set heading off feedback off pagesize 0 verify off echo off trimspool on define off
select count(*) from cdb_users_with_defpwd a, cdb_users c
where a.username = c.username and a.con_id = c.con_id;
exit
EOF
) || exit 1
printf '%s\n' "$out"

Očekivani izlaz

0

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

To reset the account with NO AUTHENTICATION, execute the following SQL statement in CDB: ALTER USER <USERNAME> NO AUTHENTICATION; Notes: ; As per Oracle Support Document 2173962.1, newly created database may list SYS and SYSTEM in CBA_USERS_WITH_DEFPWD even if they were set with non- default passwords. Running ALTER USER with the same password will correctly recognize these accounts as non-default. ; If remote_password_file is set to NONE, changing the SYS password via ALTER USER is not possible. In this case, update remote_password_file to EXCLUSIVE before modifying the SYS password.

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

tmaegis scan --target oracle-db