Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-71675 | DTOO323 | SV-86299r1_rule | Medium |
Description |
---|
When a separate application is used to launch Publisher 2016 programmatically, any macros can run in the programmatically-opened application without being blocked. Disabling or not configuring this setting could allow a malicious user to use automation to run malicious code in Publisher 2016. |
STIG | Date |
---|---|
Microsoft Publisher 2016 STIG | 2016-12-19 |
Check Text ( None ) |
---|
None |
Fix Text (F-46185r1_fix) |
---|
Set the policy value for User Configuration -> Administrative Templates -> Microsoft Publisher 2016 -> Security "Publisher Automation Security Level" to "Enabled and High (Disabled)" is selected. |