Title

Configuration for enabling of hyperlinks must be enforced. (Cat II impact)

Discussion

Access underlines hyperlinks that appear in tables, queries, forms, and reports. If this configuration is changed, users might click on dangerous hyperlinks without realizing it, which could pose a security risk

Check Content

The policy value for User Configuration -> Administrative Templates -> Microsoft Access 2010-> Application Settings -> Web Options... -> General “Underline Hyperlinks” must be “Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\14.0\access\internet Criteria: If the value DoNotUnderlineHyperlinks is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Access 2010 -> Application Settings -> Web Options... -> General “Underline Hyperlinks” to “Enabled”.

Additional Identifiers

Rule ID: SV-33428r1_rule

Vulnerability ID: V-17810

Group Title: DTOO130 - Underline hyperlinks

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.