Skip to Main Content
SEI Idea Portal
Status Submitted
Workspace HC-DPS-EI: CCG
Created by James Truelove
Created on Mar 18, 2025

Remove Public Role from CCW SQL Database

A high vulnerability has been found within the CARDIOLABCCWPRD server. The finding is: a Public role has been granted permissions on the CARDDAS database.

We would like to have this permission database removed from the Public role. We would perform this remediation once GE determines it is safe to do so without impacting needed functionality.

It is a security recommendation from the HIPPA audit that Idera SQL Secure runs and they have called out the following:

"Security Check: Public Role Has Permissions on User Database Objects.

      Determine whether the public database role has been granted permissions on user database objects.

Risk Level: High

      Server is vulnerable if the public role has been granted permissions on user databases."