Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Disable sending the form template with the eMail form in InfoPath.
Description
Discussion Text
By default, InfoPath 2007 allows users to attach form templates when sending e-mail forms. If users are able to open form templates included with e-mail forms, rather than using a cached version that is previously published, an attacker could send a malicious form template with the e-mail form in an attempt to gain access to sensitive information.
Note The form template is only opened directly if the form opens with a restricted security level. Otherwise the attachment is actually a link to the published location.
Note The form template is only opened directly if the form opens with a restricted security level. Otherwise the attachment is actually a link to the published location.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.