.NET default proxy settings must be reviewed and approved.
An XCCDF Rule
Description
<VulnDiscussion>The .Net framework can be configured to utilize a different proxy or altogether bypass the default proxy settings in the client's browser. This may lead to the framework using a proxy that is not approved for use. If the proxy is malicious, this could lead to a loss of application integrity and confidentiality.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-225234r879887_rule
- Severity
- Low
- References
- Updated
Remediation - Manual Procedure
Open Windows explorer and search for all "*.exe.config" and "machine.config" files.
Search each file for the "defaultProxy" element.
Clear the values contained in the "defaultProxy" element, and the "bypasslist", "module", and "proxy" child elements.