Title

The IE changing zones parameter is not set correctly. (Cat II impact)

Discussion

This parameter warns the user when changing between zones. This conveys important information to the user so the user is reminded that the zone has changed and the possiblity the type of data to be entered in the site has changed. Also the user expected actions have also changed based upon what happens when a mobile code technology is encountered.

Check Content

Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value WarnonZoneCrossing value is 1, this is not a finding.

Fix Text

Change the registry key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings to the value WarnonZoneCrossing is 1.

Additional Identifiers

Rule ID: SV-6290r1_rule

Vulnerability ID: V-6240

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.