← Back to MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide

V-279382

CAT II (Medium)

MongoDB must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.

Rule ID

SV-279382r1179313_rule

STIG

MongoDB Enterprise Advanced 8.x Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-001762

Discussion

Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats.

Check Content

Review the network functions, ports, protocols, and services supported by the database management system (DBMS).

If any protocol is prohibited by the PPSM guidance and is enabled, this is a finding.

Fix Text

Disable each prohibited network function, port, protocol, or service prohibited by the PPSM guidance.

More information for MongoDB port management can be found at the following link:
https://www.mongodb.com/docs/manual/reference/default-mongodb-port/