Oracle 19c CIS Recommendation: Ensure 'EXECUTE' is revoked from 'PUBLIC' on "DBMS_CREDENTIAL
Hello all,
Oracle database version 19.28.
We have the following recommendation from Security team to implement the CIS benchmark control below:
5.1.1.7 Ensure 'EXECUTE' is revoked from 'PUBLIC' on "DBMS_CREDENTIAL" Package (Automated)
Description:
As described below, Oracle Database PL/SQL "DBMS_CREDENTIAL" package – should not be granted to PUBLIC.
• Use of the DBMS_CREDENTIAL package could allow an unauthorized user to add, create, drop, enable and update credentials allowing jobs to run on the operating
system.
Has anyone managed to implement this recommendation without any impact?