V1R6 changes
Microsoft InfoPath 2013 STIG V1R6 (2024-07-24) replaced V1R5 (2018-04-27): 24 checks added, 23 removed. It has 24 checks, against 23 in V1R5.
V1R6 checklistV1R5 checklist Compare V1R5 and V1R6 in STIG Compare
- 24 added
- 23 removed
- 0 updated
Added in V1R6 (24)
- V-242480CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-242481CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-242482CAT IIAll automatic loading from Trusted Locations must be disabled.
- V-242483CAT IIOffline Mode capability to cache queries for offline mode must be configured.
- V-242484CAT IIRedirection behavior for upgraded web sites by SharePoint must be blocked.
- V-242485CAT IIDisabling the opening of solutions from the Internet Security Zone must be configured.
- V-242486CAT IIDisabling of Fully Trusted Solutions access to computers must be configured.
- V-242487CAT IIUnsafe file types must be prevented from being attached to InfoPath forms.
- V-242488CAT IIBeaconing UI shown for opened forms must be configured.
- V-242489CAT IIBeaconing of UI forms with ActiveX controls must be enforced.
- V-242490CAT IIOpening behavior for Email forms containing code or scripts must be controlled.
- V-242491CAT IIDisabling sending form templates with the email forms must be configured.
- V-242492CAT IIDisable dynamic caching of the form template in InfoPath eMail forms.
- V-242493CAT IIInfoPath 2003 forms as email forms in InfoPath 2013 must be disallowed.
- V-242494CAT IIDisabling email forms running in Restricted Security Level must be configured.
- V-242495CAT IIDisabling email forms from the Internet Security Zone must be configured.
- V-242496CAT IIDisabling of email forms from the Full Trust Security Zone must be configured.
- V-242497CAT IIEmail with InfoPath forms must be configured to show UI to recipients.
- V-242498CAT IIInfoPath must be enforced to not use email forms from the Intranet security zone.
- V-242499CAT IIInfoPath email forms in Outlook must be disallowed.
- V-242500CAT IIDisabling opening forms with managed code from the Internet security zone must be configured.
- V-242501CAT IIA form that is digitally signed must be displayed with a warning.
- V-242502CAT IIThe InfoPath APTCA Assembly Allowable List must be enforced.
- V-265892CAT IThe version of InfoPath running on the system must be a supported version.
Removed since V1R5 (23)
- V-17187CAT IITrust Bar Notifications for unsigned application add-ins must be blocked.
- V-17471CAT IIAll automatic loading from Trusted Locations must be disabled.
- V-17576CAT IIRedirection behavior for upgraded web sites by SharePoint must be blocked.
- V-17580CAT IIOpening behavior for Email forms containing code or scripts must be controlled.
- V-17611CAT IIEmail with InfoPath forms must be configured to show UI to recipients.
- V-17654CAT IIDisable dynamic caching of the form template in InfoPath eMail forms.
- V-17655CAT IIDisabling of email forms from the Full Trust Security Zone must be configured.
- V-17656CAT IIDisabling email forms from the Internet Security Zone must be configured.
- V-17657CAT IIDisabling email forms running in Restricted Security Level must be configured.
- V-17658CAT IIDisabling of Fully Trusted Solutions access to computers must be configured.
- V-17663CAT IIDisabling the opening of solutions from the Internet Security Zone must be configured.
- V-17667CAT IIDisabling sending form templates with the email forms must be configured.
- V-17668CAT IIInfoPath 2003 forms as email forms in InfoPath 2013 must be disallowed.
- V-17745CAT IIBeaconing UI shown for opened forms must be configured.
- V-17746CAT IIBeaconing of UI forms with ActiveX controls must be enforced.
- V-17758CAT IIOffline Mode capability to cache queries for offline mode must be configured.
- V-17764CAT IIUnsafe file types must be prevented from being attached to InfoPath forms.
- V-26589CAT IIAdd-ins to Office applications must be signed by a Trusted Publisher.
- V-26618CAT IIInfoPath must be enforced to not use email forms from the Intranet security zone.
- V-26619CAT IIInfoPath email forms in Outlook must be disallowed.
- V-26620CAT IIDisabling opening forms with managed code from the Internet security zone must be configured.
- V-26621CAT IIA form that is digitally signed must be displayed with a warning.
- V-26697CAT IIThe InfoPath APTCA Assembly Allowable List must be enforced.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R6 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.