JRE0001-J7XP - Dialog enabling users to grant perms to execute signed content from an un-trusted auth is disabled. - 'Program Files (x86)'

Information

Java applets exist in both signed and unsigned forms. Although signed applets allow for authentication of the author in order to establish trust, even signed applets can potentially contain malware. Applet sources considered trusted will normally have their certificate information populated into the browser. This enables Java to validate applets against trusted sources automatically. Permitting users to grant execution permissions to Java applets signed by un-trusted authorities may result in malware executing on the system. This risks system confidentiality, integrity and availability.

Solution

Disable the 'Allow user to grant permissions to content from an un-trusted authority' feature.

Navigate to the 'deployment.properties' file for Java.

For 32 bit systems:
C:\Program Files\Java\jre7\lib\deployment.properties.

For 64 bit systems you must check both the 64 bit and the 32 bit files:
C:\Program Files\Java\jre7\lib\deployment.properties
C:\Program Files (x86)\Java\jre7\lib\deployment.properties

Add or update the key, 'deployment.security.askgrantdialog.notinca'. Set to a value of 'false'.

See Also

http://iase.disa.mil/stigs/app_security/app_sec/u_jre7_v1r4_stig.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, Rule-ID|SV-43208r2_rule, STIG-ID|JRE0001-J7XP, Vuln-ID|V-32828

Plugin: Windows

Control ID: bff7e27d7c2fdb7ed47bdf7f60025310c25a96046b6285db1ac00e8d1f3b50e8