| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-251557 | CAT II | MONT-WS-92040 | Mozilla Firefox Security Technical Imple... | Firefox must be configured to disable the installa... | - | |||
Check TextType "about:policies" in the browser address bar. If "InstallAddonsPermission" is not displayed under Policy Name or the Policy Value is not "Default" "false", this is a finding. Fix TextWindows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Addons Policy Name: Allow add-on installs from websites Policy State: Disabled macOS "plist" file: Add the following: <key>InstallAddonsPermission</key> <false/> Linux "policies.json" file: Add the following in the policies section: "InstallAddonsPermission": { "Default": false } Finding DetailsEvaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0E7B81B53942ED296D25D3B0AD56B1D1F43C8811 ~~~~~ 'Allow add-on installs from websites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\InstallAddonsPermission Name: Default Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_Firefox_V6R6_20251023-142444.ckl
Scan Date: 2026-01-14T12:57:25.596878
Technology Area: Windows Operating System
|
||||||||
| V-251557 | CAT II | MONT-WS-92010 | Mozilla Firefox Security Technical Imple... | Firefox must be configured to disable the installa... | - | |||
Check TextType "about:policies" in the browser address bar. If "InstallAddonsPermission" is not displayed under Policy Name or the Policy Value is not "Default" "false", this is a finding. Fix TextWindows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Addons Policy Name: Allow add-on installs from websites Policy State: Disabled macOS "plist" file: Add the following: <key>InstallAddonsPermission</key> <false/> Linux "policies.json" file: Add the following in the policies section: "InstallAddonsPermission": { "Default": false } Finding DetailsEvaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0E7B81B53942ED296D25D3B0AD56B1D1F43C8811 ~~~~~ 'Allow add-on installs from websites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\InstallAddonsPermission Name: Default Value: 0x00000000 (0) Type: REG_DWORD
Source: _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_Firefox_V6R6_20251023-141154.ckl
Scan Date: 2026-01-14T12:57:27.870047
Technology Area: Windows Operating System
|
||||||||
| V-251557 | CAT II | MONT-SW-89108 | Mozilla Firefox Security Technical Imple... | Firefox must be configured to disable the installa... | - | |||
Check TextType "about:policies" in the browser address bar. If "InstallAddonsPermission" is not displayed under Policy Name or the Policy Value is not "Default" "false", this is a finding. Fix TextWindows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Addons Policy Name: Allow add-on installs from websites Policy State: Disabled macOS "plist" file: Add the following: <key>InstallAddonsPermission</key> <false/> Linux "policies.json" file: Add the following in the policies section: "InstallAddonsPermission": { "Default": false } Finding DetailsEvaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0E7B81B53942ED296D25D3B0AD56B1D1F43C8811 ~~~~~ 'Allow add-on installs from websites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\InstallAddonsPermission Name: Default Value: 0x00000000 (0) Type: REG_DWORD
Source: MONT-SW-89108_Firefox_V6R6_20251217-203042.ckl
Scan Date: 2026-03-04T15:25:15.868210
Technology Area: Windows Operating System
|
||||||||
| V-251557 | CAT II | MONT-SW-89134 | Mozilla Firefox Security Technical Imple... | Firefox must be configured to disable the installa... | - | |||
Check TextType "about:policies" in the browser address bar. If "InstallAddonsPermission" is not displayed under Policy Name or the Policy Value is not "Default" "false", this is a finding. Fix TextWindows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Addons Policy Name: Allow add-on installs from websites Policy State: Disabled macOS "plist" file: Add the following: <key>InstallAddonsPermission</key> <false/> Linux "policies.json" file: Add the following in the policies section: "InstallAddonsPermission": { "Default": false } Finding DetailsEvaluate-STIG 1.2510.0 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0E7B81B53942ED296D25D3B0AD56B1D1F43C8811 ~~~~~ 'Allow add-on installs from websites' is Disabled Path: HKLM:\SOFTWARE\Policies\Mozilla\Firefox\InstallAddonsPermission Name: Default Value: 0x00000000 (0) Type: REG_DWORD
Source: MONT-SW-89134_Firefox_V6R6_20251217-201244.ckl
Scan Date: 2026-03-04T15:25:41.899130
Technology Area: Windows Operating System
|
||||||||