STIGQter: STIG Summary: Zebra Technologies Android 14 COPE Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 13 May 2026:

Zebra Android 14 must be configured to disable exceptions to the access control policy that prevent [selection: application processes, groups of application processes] from accessing [selection: all, private] data stored by other [selection: application processes, groups of application processes].

DISA Rule

SV-283635r1190316_rule

Vulnerability Number

V-283635

Group Title

PP-MDF-333280

Rule Version

ZEBR-14-008900

Severity

CAT II

CCI(s)

• CCI-002233 - Prevent the organization-defined software from executing at higher privilege levels than users executing the software.
• CCI-002530 - Maintain a separate execution domain for each executing system process.

Weight

10

Fix Recommendation

Configure the Zebra Android 14 device to enable the access control policy that prevents [selection: application processes, groups of application processes] from accessing [selection: all, private] data stored by other [selection: application processes, groups of application processes].

Note: All application data is inherently sandboxed and isolated from other applications. To disable copy/paste on the EMM console:

COPE:

1. Open "User restrictions".
2. Open "Set user restrictions".
3. Toggle "Disallow cross profile copy/paste" to "ON".

Check Contents

Review documentation on the managed Zebra Android 14 device and inspect the configuration on the Zebra Android device to verify the access control policy that prevents [selection: application processes] from accessing [selection: all] data stored by other [selection: application processes] is enabled.

This validation procedure is performed only on the EMM Administration Console.

On the EMM console:

COPE:

1. Open "User restrictions".
2. Open "Set user restrictions".
3. Verify that "Disallow cross profile copy/paste" is toggled to "ON".

If the EMM console device policy is not set to disable data sharing between profiles, this is a finding.

Vulnerability Number

V-283635

Documentable

False

Rule Version

ZEBR-14-008900

Severity Override Guidance

Review documentation on the managed Zebra Android 14 device and inspect the configuration on the Zebra Android device to verify the access control policy that prevents [selection: application processes] from accessing [selection: all] data stored by other [selection: application processes] is enabled.

This validation procedure is performed only on the EMM Administration Console.

On the EMM console:

COPE:

1. Open "User restrictions".
2. Open "Set user restrictions".
3. Verify that "Disallow cross profile copy/paste" is toggled to "ON".

If the EMM console device policy is not set to disable data sharing between profiles, this is a finding.

Check Content Reference

M

Target Key

5732