Detections
Analytics
KNOX-07-914200 - The Samsung must implement the management setting: Disable automatic completion of Container browser text input.
Information
The auto-fill functionality in the web browser allows the user to complete a form that contains sensitive information, such as personally identifiable information (PII), without previous knowledge of the information. By allowing the use of auto-fill functionality, an adversary who learns a user's Samsung Android 7 with Knox device password, or who otherwise is able to unlock the device, may be able to further breach other systems by relying on the auto-fill feature to provide information unknown to the adversary. By disabling the auto-fill functionality, the risk of an adversary gaining further information about the device's user or compromising other systems is significantly mitigated.SFR ID: FMT_SMF_EXT.1.1 #47
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Configure the Samsung Android 7 with Knox to enforce disabled automatic completion of Container browser text input.On the MDM console, deselect the "Allow Auto-Fill" checkbox in the "Android Knox Container >> Container Restrictions" rule.
See Also
https://iasecontent.disa.mil/stigs/zip/U_Samsung_Android_OS_7_with_Knox_2-x_V1R1_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-91351r1_rule, STIG-ID|KNOX-07-914200, Vuln-ID|V-76655
Plugin: MDM
Control ID: e3832df19d7a55776534d63381f5955beb3c5d84fa7c24d4d639d60dfb425360