UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Firefox automatically updates installed add-ons and plugins.


Overview

Finding ID Version Rule ID IA Controls Severity
V-57667 DTBF-0024 SV-72077r1_rule Medium
Description
Set this to false to disable checking for updated versions of the Extensions/Themes. Automatic updates from untrusted sites put the enclave at risk of attack and may override security settings.
STIG Date
Mozilla Firefox 2017-03-22

Details

Check Text ( C-58489r2_chk )
Procedure:
In about:config, verify that the setting for the following Preference names are set and locked.

“extensions.update.enabled”, set to "false".

Criteria:
If the values of the listed Preferences are not set and locked to these settings, then this is a finding.
Fix Text (F-62869r1_fix)
Set and lock the following preferences using the “Mozilla.cfg” file:
“extensions.update.enabled”, set to “false”.