[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-50159-3

Platform: cpe:/o:apple:mac_os_13Date: (C)2024-04-17   (M)2024-04-17



Organizational management of user web browsing history is a challenge affected by multiple facets. Organizations should decide whether to manage browser history and how much history should be maintained. Rationale: There are conflicting concerns in the retention of browser history. Unlimited retention: • Consumes disk space • Preferred by on disk forensics teams • User searchable for old visited pages • User privacy concerns • Security concerns to retain old links that may be stale or lead to compromised pages or pages with changes or inappropriate content. Old browser history becomes stale and the use or misuse of the data can lead to unwanted outcomes. Search engine results are maintained and often provide much more relevant current information than old website visit information. Impact: If old browsing history is not available, it will not be available to authorized or unauthorized users. Some users may find old and even stale information useful. Remediation: Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.Safari 2. The key to include is HistoryAgeInDaysLimit 3. The key must be set to: <integer><1,7,14,31,365,36500></integer>


Parameter:

[HistoryAgeInDaysLimit]


Technical Mechanism:

Remediation: Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.Safari 2. The key to include is HistoryAgeInDaysLimit 3. The key must be set to: integer 1,7,14,31,365,36500 /integer

CCSS Severity:CCSS Metrics:
CCSS Score : 3.7Attack Vector: NETWORK
Exploit Score: 2.2Attack Complexity: HIGH
Impact Score: 1.4Privileges Required: NONE
Severity: LOWUser Interaction: NONE
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NScope: UNCHANGED
 Confidentiality: LOW
 Integrity: NONE
 Availability: NONE
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:99050


OVAL    1
oval:org.secpod.oval:def:99050
XCCDF    1
xccdf_org.secpod_benchmark_general_Mac_OS_13

© SecPod Technologies