Detections
Analytics
DTOO412 - The ability to run unsecure Office apps must be disabled.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Unsecure apps for Office, which are apps that have web page or catalog locations that are not SSL-secured (https://), and/or are not in users' Internet zones may allow data to be transmitted/accessed via clear text to outside sources. By configuring this policy to be disabled, users will be prevented from transmitting/accessing data in a nonsecure manner.Solution
Set the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2013 >> Security Settings >> Trust Center >> Trusted Catalogs 'Allow Unsecure Apps and Catalogs' to 'Disabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_OfficeSystem_2013_V1R9_STIG.zip
Item Details
Audit Name: DISA STIG Microsoft Office System 2013 v1r9
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-13, CAT|II, CCI|CCI-000366, Rule-ID|SV-53214r5_rule, STIG-ID|DTOO412, Vuln-ID|V-40882
Plugin: Windows
Control ID: 7d7d43a5293be49f080aa09a5b6957cf6139cd4389e53f300c2ff399867bce7e