ARDC-CN-000060 - Adobe Reader DC must disable all service access to Document Cloud Services.

Information

By default, Adobe online services are tightly integrated in Adobe Reader DC. With the integration of Adobe Document Cloud, disabling this feature prevents the risk of additional attack vectors.

Within Adobe Reader DC, the Adobe Cloud resources require a paid subscription for each service.

Solution

Configure the following registry value:

Note: The Key Name 'cServices' is not created by default in the Adobe Reader DC install and must be created.

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices

Value Name: bToggleAdobeDocumentServices
Type: REG_DWORD
Value: 1

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Adobe_Acrobat_Reader_DC_Continuous_V2R1_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-213178r395853_rule, STIG-ID|ARDC-CN-000060, STIG-Legacy|SV-79429, STIG-Legacy|V-64939, Vuln-ID|V-213178

Plugin: Windows

Control ID: b1dc3999f50f99c88ffbd3a8b1562b7c3eca002ba5fe4b90306d3a1f80834447