| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-223076 | CAT II | MONT-VSF-004 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl
Scan Date: 2026-01-14T12:57:29.593425
Technology Area: Windows Operating System
|
||||||||
| V-223076 | CAT II | MONT-VSF-003 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl
Scan Date: 2026-01-14T12:57:31.028003
Technology Area: Windows Operating System
|
||||||||
| V-223076 | CAT II | MONT-MB-002 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl
Scan Date: 2026-01-14T12:57:32.457862
Technology Area: Windows Operating System
|
||||||||
| V-223076 | CAT II | MONT-DP-001 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl
Scan Date: 2026-01-14T12:57:34.785380
Technology Area: Windows Operating System
|
||||||||
| V-223076 | CAT II | MONT-DC-003 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl
Scan Date: 2026-01-14T12:57:36.769737
Technology Area: Windows Operating System
|
||||||||
| V-223076 | CAT II | MONT-DB-002 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl
Scan Date: 2026-01-14T12:57:38.608653
Technology Area: Windows Operating System
|
||||||||
| V-223076 | CAT II | MONT-BE-002 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl
Scan Date: 2026-01-14T12:57:39.956221
Technology Area: Windows Operating System
|
||||||||
| V-223076 | CAT II | MONT-AP-002 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl
Scan Date: 2026-01-14T12:57:42.261670
Technology Area: Windows Operating System
|
||||||||
| V-223076 | CAT II | MONT-SW-89108 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl
Scan Date: 2026-03-04T15:25:15.947087
Technology Area: Windows Operating System
|
||||||||
| V-223076 | CAT II | MONT-SW-89134 | Microsoft Internet Explorer 11 Security ... | Software must be disallowed to run or install with... | - | |||
Check TextNote: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD
Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl
Scan Date: 2026-03-04T15:25:41.971891
Technology Area: Windows Operating System
|
||||||||