The Tanium SQL server must be dedicated to the Tanium database.

From Tanium 7.0 Security Technical Implementation Guide

Associated with: CCI-002346

SV-93353r1_rule The Tanium SQL server must be dedicated to the Tanium database.

Vulnerability discussion

Failure to protect organizational information from data mining may result in a compromise of information.Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example: limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.

Check content

With the Tanium System Administrator's assistance, access the server on which the Tanium SQL database is installed. Review the databases hosted by that SQL server. If more databases exist on the SQL server than the Tanium database, this is a finding.

Fix text

Move the Tanium SQL database from the SQL server hosting multiple databases to a dedicated SQL server or remove other databases co-located with Tanium on the existing SQL server.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.