Item Search

NameAudit NamePluginCategory
DTOO104 - Disabling of user name and password syntax from being used in URLs must be enforced in PowerPoint.DISA STIG Microsoft PowerPoint 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO104 - Disabling of user name and password syntax from being used in URLs must be enforced.DISA STIG Microsoft Word 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO107 - Open/Save actions for Excel 4 worksheets must be blocked.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO111 - Enabling IE Bind to Object functionality must be present.DISA STIG Microsoft OneNote 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO117 - Saved from URL mark to assure Internet zone processing must be enforced.DISA STIG Microsoft OneNote 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO119 - Configuration for file validation must be enforced.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO120 - Open/Save actions for web pages and Excel 2003 XML spreadsheets must be blocked.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO121 - Files from the Internet zone must be opened in Protected View.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO122 - Open/Save actions for dBase III / IV files must be blocked.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO123 - Navigation to URLs embedded in Office products must be blocked.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO123 - Navigation to URLs embedded in Office products must be blocked.DISA STIG Microsoft Word 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO123 - Navigation to URLs embedded in Office products must be blocked.DISA STIG Microsoft Visio 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO124 - Scripted Window Security must be enforced in PowerPoint.DISA STIG Microsoft PowerPoint 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO124 - Scripted Window Security must be enforced.DISA STIG Microsoft Word 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO124 - Scripted Window Security must be enforced.DISA STIG Microsoft Visio 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO126 - Add-on Management functionality must be allowed.DISA STIG Microsoft OneNote 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO127 - Add-ins to Office applications must be signed by a Trusted Publisher.DISA STIG Microsoft PowerPoint 2016 v2r1Windows

CONFIGURATION MANAGEMENT

DTOO131 - Trust Bar Notifications for unsigned application add-ins must be blocked.DISA STIG Microsoft Word 2016 v2r1Windows

CONFIGURATION MANAGEMENT

DTOO131 - Trust Bar Notifications for unsigned application add-ins must be blocked.DISA STIG Microsoft Visio 2016 v2r1Windows

CONFIGURATION MANAGEMENT

DTOO132 - File Downloads must be configured for proper restrictions in PowerPoint.DISA STIG Microsoft PowerPoint 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO132 - File Downloads must be configured for proper restrictions.DISA STIG Microsoft OneNote 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO134 - Disallowance of trusted locations on the network must be enforced.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO209 - Protection from zone elevation must be enforced.DISA STIG Microsoft Publisher 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO209 - Protection from zone elevation must be enforced.DISA STIG Microsoft OneNote 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO209 - Protection from zone elevation must be enforced.DISA STIG Microsoft Visio 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO288 - Files in unsafe locations must be opened in Protected View.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO292 - Document behavior if file validation fails must be set - DisableEditFromPVDISA STIG Microsoft PowerPoint 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO292 - Document behavior if file validation fails must be set - openinprotectedviewDISA STIG Microsoft PowerPoint 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO292 - Document behavior if file validation fails must be set.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO302 - The automatically update links feature must be disabled.DISA STIG Microsoft Word 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO304 - Warning Bar settings for VBA macros must be configured.DISA STIG Microsoft PowerPoint 2016 v2r1Windows

CONFIGURATION MANAGEMENT

DTOO334 - Word 2000 binary documents and templates must be configured to edit in protected view.DISA STIG Microsoft Word 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO337 - Word 95 binary documents and templates must be configured to edit in protected view.DISA STIG Microsoft Word 2016 v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO418 - WEBSERVICE functions must be disabled.DISA STIG Microsoft Excel 2016 v2r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

MYS8-00-000200 - MySQL Database Server 8.0 must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

ACCESS CONTROL

MYS8-00-000300 - MySQL Database Server 8.0 must produce audit records containing sufficient information to establish what type of events occurred.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

AUDIT AND ACCOUNTABILITY

MYS8-00-000800 - The MySQL Database Server 8.0 must include additional, more detailed, organizationally defined information in the audit records for audit events identified by type, location, or subject.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

AUDIT AND ACCOUNTABILITY

MYS8-00-001500 - The MySQL Database Server 8.0 must protect against a user falsely repudiating having performed organization-defined actions.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

AUDIT AND ACCOUNTABILITY

MYS8-00-002000 - The MySQL Database Server 8.0 must be able to generate audit records when security objects are accessed.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

AUDIT AND ACCOUNTABILITY

MYS8-00-003100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify categories of information (e.g., classification levels/security levels) occur.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

AUDIT AND ACCOUNTABILITY

MYS8-00-004400 - The MySQL Database Server 8.0 must be able to generate audit records when successful accesses to objects occur.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

AUDIT AND ACCOUNTABILITY

MYS8-00-004800 - The MySQL Database Server 8.0 must enforce authorized access to all PKI private keys stored/utilized by the MySQL Database Server 8.0.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

IDENTIFICATION AND AUTHENTICATION

MYS8-00-005300 - The MySQL Database Server 8.0 must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

IDENTIFICATION AND AUTHENTICATION

MYS8-00-005500 - The MySQL Database Server 8.0 must be configured in accordance with the security configuration settings based on DoD security configuration and implementation guidance, including STIGs, NSA configuration guides, CTOs, DTMs, and IAVMs.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

CONFIGURATION MANAGEMENT

MYS8-00-005600 - Default demonstration and sample databases, database objects, and applications must be removed.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

CONFIGURATION MANAGEMENT

MYS8-00-005700 - Unused database components, MySQL Database Server 8.0 software, and database objects must be removed.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

CONFIGURATION MANAGEMENT

MYS8-00-006100 - The MySQL Database Server 8.0 must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

IDENTIFICATION AND AUTHENTICATION

MYS8-00-006200 - The MySQL Database Server 8.0 must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for cryptographic operations.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

IDENTIFICATION AND AUTHENTICATION

MYS8-00-006500 - The MySQL Database Server 8.0 must isolate security functions from non-security functions.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

SYSTEM AND COMMUNICATIONS PROTECTION

MYS8-00-006800 - Access to database files must be limited to relevant processes and to authorized, administrative users.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

SYSTEM AND COMMUNICATIONS PROTECTION