| V-213117 | | Adobe Acrobat Pro DC Continuous Enhanced Security for standalone mode must be enabled. | Enhanced Security (ES) is a sandbox capability that restricts access to system resources. ES can be configured in two modes: Standalone mode is when A... |
| V-213118 | | Adobe Acrobat Pro DC Continuous Enhanced Security for browser mode must be enabled. | Enhanced Security (ES) is a sandbox capability that restricts access to system resources and prevents PDF cross domain access. ES can be configured in... |
| V-213119 | | Adobe Acrobat Pro DC Continuous PDF file attachments must be blocked. | Acrobat Pro allows for files to be attached to PDF documents. Attachments represent a potential security risk because they can contain malicious conte... |
| V-213122 | | Adobe Acrobat Pro DC Continuous must be configured to block Flash Content. | Flash has a long history of vulnerabilities. Although Flash is no longer provided with Acrobat, if the system has Flash installed, a malicious PDF co... |
| V-213123 | | The Adobe Acrobat Pro DC Continuous Send and Track plugin for Outlook must be disabled. | When enabled, the Adobe Send and Track button appears in Outlook. When an email is composed it enables the ability to send large files as public links... |
| V-213124 | | Adobe Acrobat Pro DC Continuous privileged file and folder locations must be disabled. | Privileged Locations are the primary method Acrobat uses to allow users and admins to specify trusted content that should be exempt from security rest... |
| V-213127 | | Adobe Acrobat Pro DC Continuous Protected Mode must be enabled. | Protected Mode is a “sandbox” that is essentially a read-only mode. When enabled, Acrobat allows the execution environment of untrusted PDF's and the... |
| V-213128 | | Adobe Acrobat Pro DC Continuous Protected View must be enabled. | Protected View is a “super-sandbox” that is essentially a read-only mode. When enabled, Acrobat strictly confines the execution environment of untrust... |
| V-213131 | | Adobe Acrobat Pro DC Continuous must disable the ability to store files on Acrobat.com. | Adobe Acrobat Pro DC provides the ability to store PDF files on Adobe.com servers. Allowing users to store files on non-DoD systems introduces risk of... |
| V-213132 | | Adobe Acrobat Pro DC Continuous Cloud Synchronization must be disabled. | By default, Adobe online services are tightly integrated in Adobe Acrobat. When the Adobe Cloud synchronization is disabled it prevents the synchroniz... |
| V-245874 | | Adobe Acrobat Pro DC Continuous FIPS mode must be enabled. | Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The application must implement cryptographi... |
| V-213120 | | Adobe Acrobat Pro DC Continuous access to unknown websites must be restricted. | Acrobat provides the ability for the user to store a list of websites with an associated behavior of allow, ask, or block. Websites that are not in th... |
| V-213121 | | Adobe Acrobat Pro DC Continuous access to websites must be blocked. | PDF files can contain URLs that initiate connections to websites in order to share or get information. Any Internet access introduces a security risk ... |
| V-213126 | | Adobe Acrobat Pro DC Continuous periodic downloading of Adobe European certificates must be disabled. | By default, the user can update Adobe European certificates from an Adobe server through the GUI. When updating Adobe European certificates is disab... |
| V-213130 | | Adobe Acrobat Pro DC Continuous Default Handler changes must be disabled. | Acrobat Pro allows users to change the version of Acrobat Pro that is used to read PDF files. This is a risk if multiple versions of Acrobat are insta... |
| V-213133 | | Adobe Acrobat Pro DC Continuous Repair Installation must be disabled. | When Repair Installation is disabled the user does not have the option (Help Menu) or ability to repair an Adobe Acrobat Pro DC install. Ability to re... |
| V-213134 | | Adobe Acrobat Pro DC Continuous third-party web connectors must be disabled. | Third-party connectors include services such as Dropbox and Google Drive. When third-party web connectors are disabled, it prevents access to third-pa... |
| V-213135 | | Adobe Acrobat Pro DC Continuous Webmail must be disabled. | Acrobat Pro DC provides a Webmail capability. This allows users to send PDFs as email attachments using any mail account that supports SMTP/IMAP proto... |
| V-213136 | | The Adobe Acrobat Pro DC Continuous Welcome Screen must be disabled. | The Adobe Welcome screen can be distracting. It provides marketing material and also has online links to the Adobe quick tips website, tutorials, blog... |
| V-213137 | | Adobe Acrobat Pro DC Continuous SharePoint and Office365 access must be disabled. | Both SharePoint and Office365 configurations are shared in one setting. Disabling this setting removes the user’s ability to use both SharePoint and O... |
| V-213138 | | Adobe Acrobat Pro DC Continuous Periodic downloading of Adobe certificates must be disabled. | By default, the user can update Adobe certificates from an Adobe server through the GUI. When updating Adobe certificates is disabled, it prevents the... |
| V-213139 | | Adobe Acrobat Pro DC Continuous privileged host locations must be disabled. | Privileged Locations are the primary method Acrobat uses to allow users and admins to specify trusted content that should be exempt from security rest... |
| V-213129 | | The Adobe Acrobat Pro DC Continuous latest security-related software updates must be installed. | Security flaws with software applications are discovered daily. Vendors are constantly updating and patching their products to address newly discovere... |
