Detections
Analytics

1.119 (L1) Ensure 'Manage exposure of local IP addressess by WebRTC' is set to 'Disabled'

Information

This policy setting specifies a list of URLs or patterns which local IP address will be exposed by WebRTC.

The recommended state for this setting is: Disabled.

Note: If this policy is enabled, disabled, or not configured, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Disabled, WebRTC will expose local IP addresses.

Enabling this setting and allowing exposure of IP addresses can allow an attacker to gather information about the internal network that could potentially be utilized to breach and traverse a network.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled :

Microsoft Edge\Manage exposure of local IP addressess by WebRTC

Impact:

None - this is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/24642

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: abd8162328fbcd243acc491da627e8de5eecbf421a72d8711772520dfb92c57c