V1R12 changes
Microsoft InfoPath 2010 STIG V1R12 (2024-07-24) replaced V1R11 (2018-04-27): 25 checks added, 24 removed. It has 25 checks, against 24 in V1R11.
V1R12 checklistV1R11 checklist Compare V1R11 and V1R12 in STIG Compare
- 25 added
- 24 removed
- 0 updated
Added in V1R12 (25)
- V-241886CAT IIApplication add-ins must be signed by Trusted Publisher.
- V-241887CAT IIData Execution Prevention must be enforced.
- V-241888CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-241889CAT IIAll automatic loading from Trusted Locations must be disabled.
- V-241890CAT IIOffline Mode capability to cache queries for offline mode must be configured.
- V-241891CAT IIRedirection behavior for upgraded web sites by SharePoint must be blocked.
- V-241892CAT IIDisabling the opening of solutions from the Internet Security Zone must be configured.
- V-241893CAT IIDisabling of Fully Trusted Solutions access to computers must be configured.
- V-241894CAT IIUnsafe file types must be prevented from being attached to InfoPath forms.
- V-241895CAT IIBeaconing UI shown for opened forms must be configured.
- V-241896CAT IIBeaconing of UI forms with ActiveX controls must be enforced.
- V-241897CAT IIOpening behavior for EMail forms containing code or scripts must be controlled.
- V-241898CAT IIDisabling sending form templates with the email forms must be configured.
- V-241899CAT IIDynamic caching of InfoPath eMail forms must be disabled.
- V-241900CAT IIInfoPath 2003 forms as email forms in InfoPath 2010 must be disallowed.
- V-241901CAT IIDisabling email forms running in Restricted Security Level must be configured.
- V-241902CAT IIDisabling email forms from the Internet Security Zone must be configured.
- V-241903CAT IIDisabling of email forms from the Full Trust Security Zone must be configured.
- V-241904CAT IIEmail with InfoPath forms must be configured to show UI to recipients.
- V-241905CAT IIInfoPath must be enforced to not use e-mail forms from the Intranet security zone.
- V-241906CAT IIInfoPath e-mail forms in Outlook must be disallowed.
- V-241907CAT IIDisabling opening forms with managed code from the Internet security zone must be configured.
- V-241908CAT IIA form that is digitally signed must be displayed with a warning.
- V-241909CAT IIThe InfoPath APTCA Assembly Allowable List must be enforced.
- V-265891CAT IThe version of InfoPath running on the system must be a supported version.
Removed since V1R11 (24)
- V-17187CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-17471CAT IIAll automatic loading from Trusted Locations must be disabled.
- V-17576CAT IIRedirection behavior for upgraded web sites by SharePoint must be blocked.
- V-17580CAT IIOpening behavior for EMail forms containing code or scripts must be controlled.
- V-17611CAT IIEmail with InfoPath forms must be configured to show UI to recipients.
- V-17654CAT IIDynamic caching of InfoPath eMail forms must be disabled.
- V-17655CAT IIDisabling of email forms from the Full Trust Security Zone must be configured.
- V-17656CAT IIDisabling email forms from the Internet Security Zone must be configured.
- V-17657CAT IIDisabling email forms running in Restricted Security Level must be configured.
- V-17658CAT IIDisabling of Fully Trusted Solutions access to computers must be configured.
- V-17663CAT IIDisabling the opening of solutions from the Internet Security Zone must be configured.
- V-17667CAT IIDisabling sending form templates with the email forms must be configured.
- V-17668CAT IIInfoPath 2003 forms as email forms in InfoPath 2010 must be disallowed.
- V-17745CAT IIBeaconing UI shown for opened forms must be configured.
- V-17746CAT IIBeaconing of UI forms with ActiveX controls must be enforced.
- V-17758CAT IIOffline Mode capability to cache queries for offline mode must be configured.
- V-17764CAT IIUnsafe file types must be prevented from being attached to InfoPath forms.
- V-26589CAT IIApplication add-ins must be signed by Trusted Publisher.
- V-26590CAT IIData Execution Prevention must be enforced.
- V-26618CAT IIInfoPath must be enforced to not use e-mail forms from the Intranet security zone.
- V-26619CAT IIInfoPath e-mail forms in Outlook must be disallowed.
- V-26620CAT IIDisabling opening forms with managed code from the Internet security zone must be configured.
- V-26621CAT IIA form that is digitally signed must be displayed with a warning.
- V-26697CAT IIThe InfoPath APTCA Assembly Allowable List must be enforced.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R12 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.