The service may be configured to apply database engine security patches and minor version upgrades during a maintenance window, to limit exposure to known engine vulnerabilities; on some providers this is always on.
Automated Engine Patching
CCC.RDMS.CP18
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.RDMS.TH06 | Database Engine Runs with Known Vulnerabilities | Automated engine patching may be disabled, or maintenance windows may be deferred indefinitely, so the database engine continues to run a version with published vulnerabilities. Those vulnerabilities can be exploited by any client able to reach the engine, compromising the confidentiality, integrity, and availability of the database. |