Title

Scan to a file share is enabled but the file shares do not have the appropriate discretionary access control list in place. (Cat III impact)

Discussion

Without appropriate discretionary access controls unauthorized individuals may read the scanned data. This can lead to a compromise of sensitive data. The SA will ensure file shares have the appropriate discretionary access control list in place if scan to a file share is enabled.

Check Content

The reviewer will, with the assistance of the SA, verify that file shares have the appropriate discretionary access control list in place if scan to a file share is enabled.

Fix Text

Create the appropriate discretionary access control list for file shares if scan to a file share is enabled.

Additional Identifiers

Rule ID: SV-7027r1_rule

Vulnerability ID: V-6802

Group Title: MFD Scan Discretionary Access Control

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.