STIGQter: STIG Summary: Google Chrome Current Windows Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

Web Bluetooth API must be disabled.

DISA Rule

SV-241787r720329_rule

Vulnerability Number

V-241787

Group Title

SRG-APP-000141

Rule Version

DTBC-0073

Severity

CAT II

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Windows group policy:
1. Open the “group policy editor” tool with gpedit.msc
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Content Settings
Policy Name: Control use of the Web Bluetooth API
Policy State: Enabled
Policy Value: Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API

Check Contents

Universal method:
1. In the omnibox (address bar) type chrome://policy
2. If DefaultWebBluetoothGuardSetting is not displayed under the Policy Name column or it is not set to 2 under the Policy Value column, then this is a finding.

Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the DefaultWebBluetoothGuardSetting value name does not exist or its value data is not set to 2, then this is a finding.

Vulnerability Number

V-241787

Documentable

False

Rule Version

DTBC-0073

Severity Override Guidance

Universal method:
1. In the omnibox (address bar) type chrome://policy
2. If DefaultWebBluetoothGuardSetting is not displayed under the Policy Name column or it is not set to 2 under the Policy Value column, then this is a finding.

Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the DefaultWebBluetoothGuardSetting value name does not exist or its value data is not set to 2, then this is a finding.

Check Content Reference

M

Target Key

4081

Comments