Check: FFOX-00-000001
Mozilla Firefox STIG:
FFOX-00-000001
(in versions v6 r5 through v6 r1)
Title
The installed version of Firefox must be supported. (Cat I impact)
Discussion
Using versions of an application that are not supported by the vendor is not permitted. Vendors respond to security flaws with updates and patches. These updates are not available for unsupported versions, which can leave the application vulnerable to attack.
Check Content
Run Firefox. Click the ellipsis button >> Help >> About Firefox, and view the version number. If the Firefox version is not a supported version, this is a finding.
Fix Text
Upgrade the version of the browser to an approved version by obtaining software from the vendor or other trusted source.
Additional Identifiers
Rule ID: SV-251545r879827_rule
Vulnerability ID: V-251545
Group Title: SRG-APP-000456
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-002605 |
The organization installs security-relevant software updates within an organization-defined time period of the release of the updates. |
Controls
Number | Title |
---|---|
SI-2 |
Flaw Remediation |