Skip to content

Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable all service access to Document Cloud Services.

    &lt;VulnDiscussion&gt;By default, Adobe online services are tightly integrated in Adobe Reader DC. With the integration of Adobe Document Cloud, di...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable Cloud Synchronization.

    &lt;VulnDiscussion&gt;By default, Adobe online services are tightly integrated in Adobe Reader DC. When the Adobe Cloud synchronization is disabled...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable the Adobe Repair Installation.

    &lt;VulnDiscussion&gt;When Repair Installation is disabled the user does not have the option (Help Menu) or functional to repair an Adobe Reader DC...
    Rule Low Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable 3rd Party Web Connectors.

    &lt;VulnDiscussion&gt;When 3rd Party Web Connectors are disabled it prevents the configuration of Adobe Reader DC access to third party services fo...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable Acrobat Upsell.

    &lt;VulnDiscussion&gt;Products that don't provide the full set of features by default provide the user the opportunity to upgrade. Acrobat Upsell d...
    Rule Low Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable Adobe Send for Signature.

    &lt;VulnDiscussion&gt;The Adobe Document Cloud sign service allows users to send documents online for signature and sign from anywhere or any devic...
    Rule Low Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable access to Webmail.

    &lt;VulnDiscussion&gt;When Webmail is disabled the user cannot configure a webmail account to send an open PDF document as an attachment. Users sho...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable Online SharePoint Access.

    &lt;VulnDiscussion&gt;Disabling SharePoint disables or removes the user’s ability to add a SharePoint account access controls the application's abi...
    Rule Medium Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable the Adobe Welcome Screen.

    &lt;VulnDiscussion&gt;The Adobe Reader DC Welcome screen can be distracting and also has online links to the Adobe quick tips website, tutorials, b...
    Rule Low Severity
  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
  • Adobe Reader DC must disable Service Upgrades.

    &lt;VulnDiscussion&gt;By default, Adobe online services are tightly integrated into Adobe Reader DC. Disabling Service Upgrades disables both updat...
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules