Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-11872 | WIR1060-01 | SV-12372r1_rule | ECSC-1 | Low |
Description |
---|
The disclaimer message may give information which may key an attacker in on the device. This is primarily an OPSEC issue. This setting was directed by the JTF GNO. |
STIG | Date |
---|---|
BlackBerry OS (version 5-7) Security Technical Implementation Guide | 2013-03-14 |
Check Text ( C-14988r1_chk ) |
---|
Check a sample of BlackBerry devices (use 2-3 devices as a random sample): - Open the BlackBerry email folder. - Highlight the date line at the top of the list of messages. - Click the Menu button. - Select Options, then Email Settings. - Check the contents of “Auto Signature” text box to verify compliance. |
Fix Text (F-23348r1_fix) |
---|
If BlackBerry email auto signatures are used, the signature message does not disclose that the email originated from a BlackBerry or mobile device (e.g., “Sent From My Wireless Handheld”). |