Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Firefox is not configured to provide warnings when a user switches from a secure (SSL-enabled) to a non-secure page.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-57659 | DTBF-0020 | SV-72069r1_rule | Medium |
| Description |
|---|
| Users may not be aware that the information being viewed under secure conditions in a previous page are not currently being viewed under the same security settings. |
| STIG | Date |
|---|---|
| Mozilla Firefox | 2017-03-22 |
Details
| Check Text ( C-58481r3_chk ) |
|---|
| Procedure: In about:config, verify that the setting for the following Preference names are set and locked. “security.warn_leaving_secure”, set to “true”. Criteria: If the values of the listed Preferences are not set and locked to these settings, then this is a finding. |
| Fix Text (F-62861r1_fix) |
|---|
| Set and lock the following preferences using the “Mozilla.cfg” file: “security.warn_leaving_secure”, set to “true”. |