Database Security Knowledgebase Update 5.05

This month's update for Database Security Knowledgebase is now available.

Knowledgebase version 5.05 includes new and updated checks for MySQL.

New Vulnerability and Configuration Check Highlights

MySQL

  • Locked Accounts
    • Check for accounts that have been locked
    • Risk: Informational
    • Relevant CVEs:N/A

Updated Checks

MySQL

  • Latest release not installed
    • Updated to support MySQL 5.5.51, 5.6.32 and 5.7.14
    • Risk: High
    • Relevant CVEs:N/A
  • Release update not installed on time
    • Updated to support MySQL 5.5.51, 5.6.32 and 5.7.14
    • Risk: High
    • Relevant CVEs:N/A

New Policies

DISA-STIG SQL Server 2014 V1R1 -Audit (Built-In)

  • This policy has been created with guidance of the configuration parameters outlined by the DISA-STIG Microsoft SQL Server 2014 Security Technical Implementation Guide Version 1, Release 1.

Availability

  • Available to allAppDetectivePRO and DbProtect customers with maintenance (subscription or perpetual) in good standing at no additional cost
  • Download SHATTER Knowledgebase from the Trustwave Support Portal (https://www.trustwave.com/Company/Support/ and select AppDetectivePRO or DbProtect)
  • AppDetectivePRO customers can use the Updater within the product as well