Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-26704 | DTOO321 - Office System | SV-34089r1_rule | ECSC-1 | Medium |
Description |
---|
This policy setting allows you configure if the document properties are encrypted. This applies to OLE documents (Office 97-2003 compatible) if the application is configured for CAPI RC4. Disabling this setting will prevent the encryption of document properties, which may expose sensitive data. |
STIG | Date |
---|---|
Microsoft Office System 2010 | 2015-04-16 |
Check Text ( None ) |
---|
None |
Fix Text (F-30018r1_fix) |
---|
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2010 -> Security Settings “Encrypt document properties” to “Enabled". |