Check: WN08-UC-000009
Windows 8/8.1 STIG:
WN08-UC-000009
(in versions v1 r23 through v1 r16)
Title
Zone information must be preserved when saving attachments. (Cat II impact)
Discussion
Preserving zone of origin (internet, intranet, local, restricted) information on file attachments allows Windows to determine risk.
Check Content
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_CURRENT_USER Subkey: \Software\Microsoft\Windows\CurrentVersion\Policies\Attachments\ Value Name: SaveZoneInformation Type: REG_DWORD Value: 2
Fix Text
Configure the policy value for User Configuration -> Administrative Templates -> Windows Components -> Attachment Manager -> "Do not preserve zone information in file attachments" to "Disabled".
Additional Identifiers
Rule ID: SV-48216r1_rule
Vulnerability ID: V-14268
Group Title: Attachment Mgr - Preserve Zone Info
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
Implement the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |