STIGQter STIGQter: STIG Summary:

Microsoft InfoPath 2013 STIG

Version: 1

Release: 5 Benchmark Date: 27 Apr 2018

SV-53331r1_ruleTrust Bar Notifications for unsigned application add-ins must be blocked.
SV-53333r2_ruleAll automatic loading from Trusted Locations must be disabled.
SV-53337r1_ruleRedirection behavior for upgraded web sites by SharePoint must be blocked.
SV-53362r1_ruleOpening behavior for Email forms containing code or scripts must be controlled.
SV-53384r1_ruleEmail with InfoPath forms must be configured to show UI to recipients.
SV-53378r1_ruleDisable dynamic caching of the form template in InfoPath eMail forms.
SV-53383r1_ruleDisabling of email forms from the Full Trust Security Zone must be configured.
SV-53382r1_ruleDisabling email forms from the Internet Security Zone must be configured.
SV-53381r1_ruleDisabling email forms running in Restricted Security Level must be configured.
SV-53353r1_ruleDisabling of Fully Trusted Solutions access to computers must be configured.
SV-53340r1_ruleDisabling the opening of solutions from the Internet Security Zone must be configured.
SV-53366r1_ruleDisabling sending form templates with the email forms must be configured.
SV-53379r1_ruleInfoPath 2003 forms as email forms in InfoPath 2013 must be disallowed.
SV-53357r1_ruleBeaconing UI shown for opened forms must be configured.
SV-53359r1_ruleBeaconing of UI forms with ActiveX controls must be enforced.
SV-53335r2_ruleOffline Mode capability to cache queries for offline mode must be configured.
SV-53355r1_ruleUnsafe file types must be prevented from being attached to InfoPath forms.
SV-53328r1_ruleAdd-ins to Office applications must be signed by a Trusted Publisher.
SV-53385r1_ruleInfoPath must be enforced to not use email forms from the Intranet security zone.
SV-53389r1_ruleInfoPath email forms in Outlook must be disallowed.
SV-53392r1_ruleDisabling opening forms with managed code from the Internet security zone must be configured.
SV-53432r1_ruleA form that is digitally signed must be displayed with a warning.
SV-53452r1_ruleThe InfoPath APTCA Assembly Allowable List must be enforced.