The Mainframe Product must prevent the automatic execution of mobile code in, at a minimum, office applications, browsers, email clients, mobile code run-time environments, and mobile agent systems.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-205516
SRG-APP-000210-MFP-000281
SV-205516r961092_rule
Medium
Description
Mobile code can cause damage to the system. It can execute without explicit action from, or notification to, a user.
Preventing automatic execution of mobile code includes, for example, disabling auto execute features on information system components.
This requirement applies to mobile code-enabled software, which is capable of executing one or more types of mobile code.