Detections
Analytics

1.91 (L1) Ensure 'Enable AutoFill for payment instruments' is set to 'Disabled'

Information

This policy setting controls whether users can utilize payment information, such as credit or debit cards in web forms using previously stored information.

The recommended state for this setting is: Disabled.

Having payment information stored and auto filled in Microsoft Edge could allow for an attacker to gain access to this sensitive data.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled :

Microsoft Edge\Enable AutoFill for payment instruments

Impact:

Users will be unable to use and store AutoFill data for credit and debit card information in Microsoft Edge.

See Also

https://workbench.cisecurity.org/benchmarks/24642

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 42e5f419f14930b04313bc935b62d4fb95ce5ffb372d958f9c0901539a602d7e