STIGQter: STIG Summary: Samsung OS 9 with Knox 3.x COBO Use Case KPE(AE) Deployment Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Apr 2020:

Samsung Android must be configured to disable automatic completion of Samsung Internet browser text input.

DISA Rule

SV-102975r1_rule

Vulnerability Number

V-92887

Group Title

PP-MDF-991000

Rule Version

KNOX-09-000580

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure Samsung Android to disable automatic completion of Samsung Internet app text input.

On the MDM console, for the device, in the "Knox restrictions" group, unselect "allow autofill".

Check Contents

Review device configuration settings to confirm that automatic completion of Samsung Internet app text input is disabled.

This procedure is performed on both the MDM Administration console and the Samsung Android device.

On the MDM console, for the device, in the "Knox restrictions" group, verify that "allow autofill" is not selected.

On the Samsung Android device, do the following:
1. From the "Personal" App screen, launch the "Samsung Internet" app.
2. From the collapsed menu icon (three horizontal bars) on the toolbar, tap "Settings".
3. Tap "Privacy and security".
4. Verify that "Autofill forms" is disabled and cannot be enabled.

If on the MDM console "allow autofill" is selected, or on the Samsung Android device "Autofill forms" can be enabled by the user, this is a finding.

Vulnerability Number

V-92887

Documentable

False

Rule Version

KNOX-09-000580

Severity Override Guidance

Review device configuration settings to confirm that automatic completion of Samsung Internet app text input is disabled.

This procedure is performed on both the MDM Administration console and the Samsung Android device.

On the MDM console, for the device, in the "Knox restrictions" group, verify that "allow autofill" is not selected.

On the Samsung Android device, do the following:
1. From the "Personal" App screen, launch the "Samsung Internet" app.
2. From the collapsed menu icon (three horizontal bars) on the toolbar, tap "Settings".
3. Tap "Privacy and security".
4. Verify that "Autofill forms" is disabled and cannot be enabled.

If on the MDM console "allow autofill" is selected, or on the Samsung Android device "Autofill forms" can be enabled by the user, this is a finding.

Check Content Reference

M

Target Key

3495

Comments