Detections
Analytics

2.26 (L1) Ensure 'Enable AutoFill for credit cards' is set to 'Disabled'

Information

Chrome allows users to auto-complete web forms with saved credit card information. Disabling this feature will prompt a user to enter all information manually.

The recommended state for this setting is: Disabled (0)

If an attacker gains access to a user's machine where the user has stored credit card AutoFill data, information could be harvested.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Enable AutoFill for credit cards

Impact:

If this setting is disabled, credit card AutoFill will be inaccessible to users.

See Also

https://workbench.cisecurity.org/benchmarks/23110

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-8, CSCv7|4.8

Plugin: Windows

Control ID: e2b4d4d6ea36bc2d9bd731b84ed4b2321d85b01c83fc3bbeee662f4664d53e16