II - Mission Support Classified
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000112
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must enable Enhanced Security in a Standalone Application.
<VulnDiscussion>PDFs have evolved from static pages to complex documents with features such as interactive forms, multimedia content, scripti...Rule Medium Severity -
SRG-APP-000112
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must enable Enhanced Security in a Browser.
<VulnDiscussion>PDFs have evolved from static pages to complex documents with features such as interactive forms, multimedia content, scripti...Rule Medium Severity -
SRG-APP-000112
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must enable Protected Mode.
<VulnDiscussion>A threat to users of Adobe Reader DC is opening a PDF file that contains malicious executable content. Protected mode provid...Rule Medium Severity -
SRG-APP-000112
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must enable Protected View.
<VulnDiscussion>A threat to users of Adobe Reader DC is opening a PDF file that contains malicious executable content. Protected view restri...Rule Medium Severity -
SRG-APP-000112
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must Block Websites.
<VulnDiscussion>Clicking any link to the Internet poses a potential security risk. Malicious websites can transfer harmful content or silentl...Rule Medium Severity -
SRG-APP-000112
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must block access to Unknown Websites.
<VulnDiscussion>Because Internet access is a potential security risk, clicking any unknown website link to the Internet poses a potential sec...Rule Medium Severity -
SRG-APP-000112
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must prevent opening files other than PDF or FDF.
<VulnDiscussion>Attachments represent a potential security risk because they can contain malicious content, open other dangerous files, or la...Rule Medium Severity -
SRG-APP-000112
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must block Flash Content.
<VulnDiscussion>Flash content is commonly hosted on a web page, but it can also be embedded in PDF and other documents. Flash could be used t...Rule Medium Severity -
SRG-APP-000133
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must disable the ability to change the Default Handler.
<VulnDiscussion>Allowing user to make changes to an application case cause a security risk. When the Default PDF Handler is disabled, the en...Rule Low Severity -
SRG-APP-000141
<GroupDescription></GroupDescription>Group -
Adobe Reader DC must disable the Adobe Send and Track plugin for Outlook.
<VulnDiscussion>When enabled, Adobe Send and Track button appears in Outlook. When an email is composed it enables the ability to send large ...Rule Low Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.