Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The "remember password" for internet e-mail accounts must be disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-17587 | DTOO237 - Outlook | SV-33524r1_rule | ECSC-1 | Medium |
| Description |
|---|
| As a security precaution, password caching for eMail Internet protocols such as POP3 or IMAP may lead to password discovery and eventually to data loss. An attacker that is able to access the users' profile may be able to acquire these cached passwords, they could then use this information to compromise the users' email accounts and other systems that use the same credentials. |
| STIG | Date |
|---|---|
| Microsoft Outlook 2010 | 2015-04-16 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-29699r1_fix) |
|---|
| Set the policy value for User Configuration -> Administrative Templates -> Microsoft Outlook 2010 -> Security “Disable ‘Remember password’ for Internet e-mail accounts” to “Enabled”. |