UCF STIG Viewer Logo

The Navigate sub-frames across different domains is not set properly for the Internet Zone.


Overview

Finding ID Version Rule ID IA Controls Severity
V-6256 DTBI039 SV-6311r1_rule ECSC-1 Medium
Description
Frames that navigate across different domains are a security concern because the user may think they are accessing pages on one site while they are actually accessing pages on another site.
STIG Date
Microsoft IE Version 6 2014-12-17

Details

Check Text ( C-284r1_chk )
Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3

Criteria: If the value 1607 is REG_DWORD = 1 (Prompt = 1), this is not a finding.
Fix Text (F-5714r1_fix)
Change the registry key HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3

Criteria: Set the value 1607 to REG_DWORD = 1 (Prompt = 1).