Encrypt document properties must be configured for OLE documents.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-26704 | DTOO321 | SV-52757r1_rule | ECSC-1 | Medium |
| Description |
|---|
| This policy setting allows a document's properties to be encrypted. This applies to OLE documents (Office 97-2003 compatible) if the application is configured for CAPI RC4. Disabling this setting will prevent the encryption of document properties, which may expose sensitive data. |
| STIG | Date |
|---|---|
| Microsoft Office System 2013 STIG | 2015-07-24 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-45683r1_fix) |
|---|
| Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Security Settings "Encrypt document properties" to "Enabled". |