Title

Configuration for enabling of hyperlinks must be enforced. (Cat II impact)

Discussion

Access underlines hyperlinks that appear in tables, queries, forms, and reports. If this configuration is changed, users might click on dangerous hyperlinks without realizing it, which could pose a security risk.

Check Content

The policy value for User Configuration -> Administrative Templates -> Microsoft Access 2010-> Application Settings -> Web Options... -> General "Underline Hyperlink" must be "Enabled". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\14.0\access\internet Criteria: If the value DoNotUnderlineHyperlinks is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Microsoft Access 2010 -> Application Settings -> Web Options... -> General "Underline Hyperlinks" to "Enabled".

Additional Identifiers

Rule ID: SV-241831r961779_rule

Vulnerability ID: V-241831

Group Title: SRG-APP-000488

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.