Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-34174 | WIR-MOS-iOS-70-03 | SV-44627r1_rule | ECWN-1 | Medium |
Description |
---|
The iOS device Bluetooth sharing feature allows applications to share data saved on the iOS device with other iOS devices via Bluetooth connections between the devices. This feature allows the wireless transmission of sensitive DoD data without using FIPS 140-2 validated encryption as required by DoD policy and could expose sensitive DoD data to unauthorized individuals. |
STIG | Date |
---|---|
Apple iOS 6 Interim Security Configuration Guide (ISCG) | 2013-01-17 |
Check Text ( C-42135r2_chk ) |
---|
This is a User-Based Enforcement (UBE) control. On a sample of site-managed iOS devices (pick 3-4 random devices), check that no applications have been enabled for Bluetooth sharing. -Have the user log into the device. -Go to Settings > Privacy > Bluetooth Sharing. -Verify there are no applications listed. Mark as a finding if any applications are listed on the Bluetooth sharing screen. |
Fix Text (F-38084r1_fix) |
---|
Delete all applications listed on the Bluetooth sharing screen or disable sharing of these applications. |