NFA MySQL should limit the number of concurrent sessions

Products

• DX NetOps

Issue/Introduction

STIG Vul ID V-235096 says that allowing unlimited user connections to MySQL can leave the server vulnerable against an attack.

Environment

All NFA Versions Prior to NFA 22.2.6

Resolution

When we ship 22.2.6, it will ship with MySQL 8.x configured to have a global value of 50 max user connections vs unlimited.

To resolve the issue now you can run this command on all 3308 and 3307 instances of MySQL:

mysql -P3308 -uroot [email protected] -t -e  "SET PERSIST max_user_connections=50;" 

 

To view the current value:

mysql -P3308 -uroot [email protected] -t -e  show global variables like '%max_user%';"

+----------------------+-------+
| Variable_name        | Value |
+----------------------+-------+
| max_user_connections | 50    |
+----------------------+-------+
1 row in set (0.14 sec)