Encrypt document properties must be configured for OLE documents.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-26704 | DTOO321 - Office System | SV-34089r1_rule | ECSC-1 | Medium |
| Description |
|---|
| This policy setting allows you configure if the document properties are encrypted. This applies to OLE documents (Office 97-2003 compatible) if the application is configured for CAPI RC4. Disabling this setting will prevent the encryption of document properties, which may expose sensitive data. |
| STIG | Date |
|---|---|
| Microsoft Office System 2010 | 2015-04-16 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-30018r1_fix) |
|---|
| Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2010 -> Security Settings “Encrypt document properties” to “Enabled". |