Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Documents must be configured to not open as Read Write when browsing.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-17759 | DTOO179 | SV-52714r2_rule | Medium |
| Description |
|---|
| By default, when an Office 2013 document on a web server is opened using Internet Explorer, the appropriate application opens the file in read-only mode. However, if the default configuration is changed, the document is opened as read/write. Users could potentially make changes to documents and resave them in situations where the web server security is not configured to prevent such changes. |
| STIG | Date |
|---|---|
| Microsoft Office System 2013 STIG | 2017-01-27 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-45638r1_fix) |
|---|
| Set the policy value for User Configuration -> Administrative Templates -> Microsoft Office 2013 -> Tools \ Options \ General \ Web Options... -> Files "Open Office documents as read/write while browsing" to "Disabled". |