DISA_STIG_Mozilla_Firefox_v6r3_Linux.audit from DISA Mozilla Firefox v6r3 STIG

FFOX-00-000001 - The installed version of Firefox must be supported.

CAT|I

CCI|CCI-002605

Rule-ID|SV-251545r807107_rule

STIG-ID|FFOX-00-000001

Vuln-ID|V-251545

FFOX-00-000002 - Firefox must be configured to allow only TLS 1.2 or above.

CCI|CCI-001453

Rule-ID|SV-251546r820745_rule

STIG-ID|FFOX-00-000002

Vuln-ID|V-251546

FFOX-00-000003 - Firefox must be configured to ask which certificate to present to a website when a certificate is required.

CAT|II

CCI|CCI-000187

Rule-ID|SV-251547r807113_rule

STIG-ID|FFOX-00-000003

Vuln-ID|V-251547

FFOX-00-000004 - Firefox must be configured to not automatically check for updated versions of installed search plugins.

CCI|CCI-000381

Rule-ID|SV-251548r807116_rule

STIG-ID|FFOX-00-000004

Vuln-ID|V-251548

FFOX-00-000005 - Firefox must be configured to not automatically update installed add-ons and plugins.

Rule-ID|SV-251549r807119_rule

STIG-ID|FFOX-00-000005

Vuln-ID|V-251549

FFOX-00-000006 - Firefox must be configured to not automatically execute or download MIME types that are not authorized for auto-download.

CCI|CCI-001242

Rule-ID|SV-251550r832305_rule

STIG-ID|FFOX-00-000006

Vuln-ID|V-251550

FFOX-00-000007 - Firefox must be configured to disable form fill assistance.

Rule-ID|SV-251551r807125_rule

STIG-ID|FFOX-00-000007

Vuln-ID|V-251551

FFOX-00-000008 - Firefox must be configured to not use a password store with or without a master password.

Rule-ID|SV-251552r822411_rule

STIG-ID|FFOX-00-000008

Vuln-ID|V-251552

FFOX-00-000009 - Firefox must be configured to block pop-up windows - Allowed Sites

Rule-ID|SV-251553r820750_rule

STIG-ID|FFOX-00-000009

Vuln-ID|V-251553

FFOX-00-000009 - Firefox must be configured to block pop-up windows - Default

FFOX-00-000009 - Firefox must be configured to block pop-up windows - Locked

FFOX-00-000010 - Firefox must be configured to prevent JavaScript from moving or resizing windows.

Rule-ID|SV-251554r807134_rule

STIG-ID|FFOX-00-000010

Vuln-ID|V-251554

FFOX-00-000011 - Firefox must be configured to prevent JavaScript from raising or lowering windows.

Rule-ID|SV-251555r807137_rule

STIG-ID|FFOX-00-000011

Vuln-ID|V-251555

FFOX-00-000013 - Firefox must be configured to disable the installation of extensions.

Rule-ID|SV-251557r820752_rule

STIG-ID|FFOX-00-000013

Vuln-ID|V-251557

FFOX-00-000014 - Background submission of information to Mozilla must be disabled.

Rule-ID|SV-251558r807146_rule

STIG-ID|FFOX-00-000014

Vuln-ID|V-251558

FFOX-00-000015 - Firefox development tools must be disabled.

CAT|III

CCI|CCI-001312

Rule-ID|SV-251559r807149_rule

STIG-ID|FFOX-00-000015

Vuln-ID|V-251559

FFOX-00-000016 - Firefox must have the DoD root certificates installed.

CCI|CCI-000185

Rule-ID|SV-251560r820754_rule

STIG-ID|FFOX-00-000016

Vuln-ID|V-251560

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - Cache

Rule-ID|SV-252881r820757_rule

STIG-ID|FFOX-00-000017

Vuln-ID|V-252881

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - Cookies

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - Downloads

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - FormData

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - History

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - Locked

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - OfflineApps

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - Sessions

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - SiteSettings

FFOX-00-000018 - Firefox must prevent the user from quickly deleting data.

CCI|CCI-002355

Rule-ID|SV-251562r807158_rule

STIG-ID|FFOX-00-000018

Vuln-ID|V-251562

FFOX-00-000019 - Firefox private browsing must be disabled.

Rule-ID|SV-251563r807161_rule

STIG-ID|FFOX-00-000019

Vuln-ID|V-251563

FFOX-00-000020 - Firefox search suggestions must be disabled.

Rule-ID|SV-251564r807164_rule

STIG-ID|FFOX-00-000020

Vuln-ID|V-251564

FFOX-00-000021 - Firefox autoplay must be disabled.

Rule-ID|SV-251565r832307_rule

STIG-ID|FFOX-00-000021

Vuln-ID|V-251565

FFOX-00-000022 - Firefox network prediction must be disabled.

Rule-ID|SV-251566r807170_rule

STIG-ID|FFOX-00-000022

Vuln-ID|V-251566

FFOX-00-000023 - Firefox fingerprinting protection must be enabled.

Rule-ID|SV-251567r807173_rule

STIG-ID|FFOX-00-000023

Vuln-ID|V-251567

FFOX-00-000024 - Firefox cryptomining protection must be enabled.

Rule-ID|SV-251568r807176_rule

STIG-ID|FFOX-00-000024

Vuln-ID|V-251568

FFOX-00-000025 - Firefox Enhanced Tracking Protection must be enabled.

Rule-ID|SV-251569r807179_rule

STIG-ID|FFOX-00-000025

Vuln-ID|V-251569

FFOX-00-000026 - Firefox extension recommendations must be disabled.

Rule-ID|SV-251570r820759_rule

STIG-ID|FFOX-00-000026

Vuln-ID|V-251570

FFOX-00-000027 - Firefox deprecated ciphers must be disabled.

Rule-ID|SV-251571r820762_rule

STIG-ID|FFOX-00-000027

Vuln-ID|V-251571

FFOX-00-000028 - Firefox must not recommend extensions as the user is using the browser.

Rule-ID|SV-251572r807188_rule

STIG-ID|FFOX-00-000028

Vuln-ID|V-251572

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Highlights

Rule-ID|SV-251573r822781_rule

STIG-ID|FFOX-00-000029

Vuln-ID|V-251573

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Locked

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Pocket

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Search

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Snippets

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - SponsoredPocket

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - SponsoredTopSites

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - TopSites

FFOX-00-000033 - Firefox must be configured so that DNS over HTTPS is disabled.

Rule-ID|SV-251577r807203_rule

STIG-ID|FFOX-00-000033

Vuln-ID|V-251577

FFOX-00-000034 - Firefox accounts must be disabled.

Rule-ID|SV-251578r807206_rule

STIG-ID|FFOX-00-000034

Vuln-ID|V-251578

FFOX-00-000036 - Firefox feedback reporting must be disabled.

Rule-ID|SV-251580r809561_rule

STIG-ID|FFOX-00-000036

Vuln-ID|V-251580

FFOX-00-000037 - Firefox encrypted media extensions must be disabled - Enabled

Rule-ID|SV-251581r807215_rule

STIG-ID|FFOX-00-000037

Vuln-ID|V-251581

FFOX-00-000037 - Firefox encrypted media extensions must be disabled - Locked

FFOX-00-000038 - Pocket must be disabled.

Rule-ID|SV-252908r836395_rule

STIG-ID|FFOX-00-000038

Vuln-ID|V-252908

FFOX-00-000039 - Firefox Studies must be disabled.

Revision 1.2

Feb 21, 2023

Miscellaneous