STIGQter: STIG Summary: Microsoft Internet Explorer 11 Security Technical Implementation Guide Version: 1 Release: 19 Benchmark Date: 24 Jul 2020:

.NET Framework-reliant components not signed with Authenticode must be disallowed to run (Restricted Sites Zone).

DISA Rule

SV-59663r1_rule

Vulnerability Number

V-46797

Group Title

DTBI650-IE11-.NET w/Authenticode unsigned - Restricted Sites

Rule Version

DTBI650-IE11

Severity

CAT II

CCI(s)

CCI-001687 - The organization ensures the use of mobile code to be deployed in information systems meets organization-defined mobile code requirements.

Weight

Fix Recommendation

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Run .NET Framework-reliant components not signed with Authenticode' to 'Enabled', and select 'Disable' from the drop-down box.

Check Contents

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Run .NET Framework-reliant components not signed with Authenticode' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2004" is REG_DWORD = 3, this is not a finding.

.NET Framework-reliant components not signed with Authenticode must be disallowed to run (Restricted Sites Zone).

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments