Questions tagged [vulnerability-assessment]
The vulnerability-assessment tag has no usage guidance.
10
questions
0
votes
0
answers
45
views
track all users access to database" vulnerability in azure sql database giving no result
I am getting "track all users access to database" vulnerability in azure sql database but after clicking on it the result page shows message that "query yield no result" and both ...
- 1
4
votes
1
answer
527
views
Is SQL Server affected by OpenSSL 3.0 Vulnerabilities: CVE 2022-3786 and CVE 2022-3602
I am trying to establish whether SQL Server is affected by the recently discovered OpenSSL vulnerabilities. For example, are SQL Servers that are using TLS/Certificates to encrypt connections between ...
- 45
0
votes
1
answer
57
views
How to setup Mysql master-slave replication with the slave meant for testing where divergence is OK
Problem:
I have a staging DB server on which functionality is tested before pushing it to the production environment. Now, we want to start doing VA/PT (Vulnerability Analysis and Penetration Testing) ...
- 11
0
votes
1
answer
447
views
Should I provide db_owner principal role to the user of the Azure SQL of my Azure Web App?
I have an Azure Web App connected to an Azure SQL database. Let's call the app ACME. The application has it's own Role and User called ACME, and I gave that User db_owner principal roles. The ...
- 229
13
votes
2
answers
4k
views
Should I drop dbo from the database role db_owner?
I did a Vulnerability Assessment for my database today. I found VA2108 and it suggests me to
ALTER ROLE [db_owner] DROP MEMBER [dbo]
But it's the default setting of any SQL instance.
Should I go for ...
- 417
4
votes
2
answers
760
views
How can I run SQL Server Vulnerability Assessment from a SQL Job?
I want to run SQL Server Vulnerability Assessment from a SQL Server Agent Job. Currently, I am attempting a job with a PowerShell script and am running a command like the one below.
Invoke-...
- 193
1
vote
2
answers
1k
views
Incorrect "Sensitive data columns should be classified" report
Every week I'm getting a failed "Vulnerability Assessment" email report from my Microsoft Azure SQL Database that is incorrect.
It complains about columns that have is_computed column in sys.columns ...
- 2,143
0
votes
1
answer
55
views
On what basis DMA identifies columns for Dynamic Data Masking?
Can anyone help me explain on what basis 'Data Migration Assessment' features recommendation suggests for Dynamic Data Masking and displays certain objects/tables columns for masking. On what basis ...
- 367
1
vote
0
answers
105
views
SQL Vulnerability Assessment Error in PowerShell
I am running Vulnerability Assessments against my SQL Servers and databases using the PowerShell cmdlets Invoke-SqlVulnerabilityAssessmentScan and Export-SqlVulnerabilityAssessmentScan, however, I am ...
- 9,642
2
votes
2
answers
6k
views
Trying to disable xp_Cmdshell and rpc_out and and receiving mixed results
I'm trying to disable xp_Cmdshell and rpc_out and when I run the commands on query analyzer it shows it's disabled.
But after this I need to run a security scan report which provides me the following ...
- 21