Automated installation of missing plugins must be disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-44787	DTBC-0036	SV-57621r2_rule		Medium

Description
The automatic search and installation of missing or not installed plugins should be disabled as this can cause significant risk if a unapproved or vulnerable plugin were to be installed without proper permissions or authorization. If you set this setting to enabled the automatic search and installation of missing plugins will be disabled in Google Chrome.

STIG	Date
Google Chrome Current Windows Security Technical Implementation Guide	2017-03-22

Details

Check Text ( C-49565r2_chk )
Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If DisablePluginFinder is not displayed under the Policy Name column or it is not set to true under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the DisablePluginFinder value name does not exist or its value data is not set to 1, then this is a finding.

Check Text ( C-49565r2_chk )

Universal method:
1. In the omnibox (address bar) type chrome://policy
2. If DisablePluginFinder is not displayed under the Policy Name column or it is not set to true under the Policy Value column, then this is a finding.

Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the DisablePluginFinder value name does not exist or its value data is not set to 1, then this is a finding.

Fix Text (F-49877r2_fix)
Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Specify whether the plugin finder should be disabled Policy State: Enabled Policy Value: N/A