Detections
Analytics

1.165 WN11-CC-000300

Information

Basic authentication for RSS feeds over HTTP must not be used.

GROUP ID: V-253408
RULE ID: SV-253408r958478

Basic authentication uses plain text passwords that could be used to compromise a system.

Solution

The default behavior is for the Windows RSS platform to not use Basic authentication over HTTP connections.

To correct this, configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> RSS Feeds >> 'Turn on Basic feed authentication over HTTP'

to 'Not Configured' or 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-253408r958478_rule, STIG-ID|WN11-CC-000300, Vuln-ID|V-253408

Plugin: Windows

Control ID: 8c1d29b18c275ebde447006f81c4a6c36c7924e7d0008eb24170b238c0cea83b