Detections
Analytics

1.23 EX19-MB-000065

Information

The Exchange Internet Message Access Protocol 4 (IMAP4) service must be disabled.

GROUP ID: V-259667
RULE ID: SV-259667r960963

IMAP4 is not approved for use within the DOD. It uses a clear-text-based user name and password and does not support the DOD standard for PKI for email access. User name and password could easily be captured from the network, allowing a malicious user to access other system features. Uninstalling or disabling the service will prevent the use of the IMAP4 protocol.

Solution

Open the Windows PowerShell in an Elevated Prompt and enter the following commands:

Get-Service -Name MSExchangeIMAPBE,MSExchangeImap4 |ForEach-Object {Set-Service -Name $_.Name -StartupType Disabled}

See Also

https://workbench.cisecurity.org/benchmarks/23653

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-259667r960963_rule, STIG-ID|EX19-MB-000065, Vuln-ID|V-259667

Plugin: Windows

Control ID: e74dfb76a4c62730b8c45f4a97ba8c07a7862343e0261b9998a2e71b6a3de488