UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The iOS device user must not allow applications to share data between iOS devices via Bluetooth.


Overview

Finding ID Version Rule ID IA Controls Severity
V-34174 WIR-MOS-iOS-70-03 SV-44627r1_rule ECWN-1 Medium
Description
The iOS device Bluetooth sharing feature allows applications to share data saved on the iOS device with other iOS devices via Bluetooth connections between the devices. This feature allows the wireless transmission of sensitive DoD data without using FIPS 140-2 validated encryption as required by DoD policy and could expose sensitive DoD data to unauthorized individuals.
STIG Date
Apple iOS 6 Security Technical Implementation Guide (STIG) 2013-05-23

Details

Check Text ( C-42135r2_chk )
This is a User-Based Enforcement (UBE) control.
On a sample of site-managed iOS devices (pick 3-4 random devices), check that no applications have been enabled for Bluetooth sharing.

-Have the user log into the device.
-Go to Settings > Privacy > Bluetooth Sharing.
-Verify there are no applications listed.

Mark as a finding if any applications are listed on the Bluetooth sharing screen.
Fix Text (F-38084r1_fix)
Delete all applications listed on the Bluetooth sharing screen or disable sharing of these applications.