Detections
Analytics

1.18 O365-CO-000016

Information

User name and password must be disabled in all Office programs.

GROUP ID: V-223298
RULE ID: SV-223298r961092

The Uniform Resource Locator (URL) standard allows user authentication to be included in URL strings in the form http://username:[email protected]. A malicious user might use this URL syntax to create a hyperlink that appears to open a legitimate website but actually opens a deceptive (spoofed) website. For example, the URL http://[email protected] to open http://www.wingtiptoys.combut actually opens http://example.com. To protect users from such attacks, Internet Explorer usually blocks any URLs using this syntax.

Solution

Set the policy value for

Computer Configuration >> Administrative Templates >> Microsoft Office 2016 (Machine) >> Security Settings >> IE Security 'Disable user name and password'

to 'Enabled' and select the check boxes for all installed Office programs.

See Also

https://workbench.cisecurity.org/benchmarks/26066

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(4), CAT|II, CCI|CCI-001170, Rule-ID|SV-223298r961092_rule, STIG-ID|O365-CO-000016, Vuln-ID|V-223298

Plugin: Windows

Control ID: 92a7b80567ce66a5c84da2d0c2a50d0c86e4d57b7b76f1b3b4ba9430f17576ba