Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Logon options must be configured to prompt (Internet zone).
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-6262 | DTBI046 | SV-40580r1_rule | ECSC-1 | Medium |
| Description |
|---|
| Users could submit credentials to servers operated by malicious people who could then attempt to connect to legitimate servers with those captured credentials. Care must be taken with user credentials, automatic logon performance, and how default Windows credentials are passed to web sites. |
| STIG | Date |
|---|---|
| Internet Explorer 9 Security Technical Implementation Guide | 2014-09-30 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-34446r1_fix) |
|---|
| Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> "Logon options" to “Enabled” and select "Prompt for user name and password" from the drop-down box. |