OCI-Networking-Open-Oracle

Owned by naveen
Aug 11, 2022
1 min read

Severity : Medium

Description: This control ensures that OCI Oracle service access is restricted from the internet on TCP port 1158,1521 or 5500. OCI Security List and Security Groups uses Applications (Protocol, Port) and Network IP address as source and destination to allow traffic to VNICs in a subnet. Each rule either allows or denies traffic when its conditions are met. Network IP addresses with Generic (0.0.0.0/0) incoming traffic from internet to VCN using Oracle service to TCP Port 1158,1521 or 5000 must be avoided in the Security List and Security Groups.

Remediation Steps:

Perform following to update the security rules in security List :

  1. Login to the OCI console at Cloud Sign In.

  2. In navigation click Networking and then click Virtual Cloud Networks.

  3. Click on the VCN reported.

  4. Under Resources, click Network List.

  5. Select the security List reported.

  6. Under Resources, click either Ingress Rules.

  7. To edit rule with IP Protocol TCP and port 1158,1521 or 5000 , click Edit Rule.

  8. Edit the Source CIDR from 0.0.0.0/0 to specific IP addresses or network.

  9. Click Save Changes.

Important:

Reference:

 

 

Blue Hexagon Proprietary