Skip to main content
CUI

Vulnerability V-220858

Back

V-220858

CAT II

Users must be notified if a web-based program attempts to install software.

Ships Affected
1
Total Findings
4
Open
0
Closed
4

Check Text

The default behavior is for Internet Explorer to warn users and select whether to allow or refuse installation when a web-based program attempts to install software on the system. If the registry value name below does not exist, this is not a finding. If it exists and is configured with a value of "0", this is not a finding. If it exists and is configured with a value of "1", this is a finding. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Installer\ Value Name: SafeForScripting Value Type: REG_DWORD Value: 0 (or if the Value Name does not exist)

Fix Text

The default behavior is for Internet Explorer to warn users and select whether to allow or refuse installation when a web-based program attempts to install software on the system. If this needs to be corrected, configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Installer >> "Prevent Internet Explorer security prompt for Windows Installer scripts" to "Not Configured" or "Disabled".

STIG Reference

STIG
Microsoft Windows 10 Security Technical Implementation Guide
Version
3
Release
6
Rule ID
SV-220858r991589_rule

All Occurrences

This vulnerability appears on 1 ship(s)

Ship Hull # Source File Status Assigned To Scan Date Actions
USNS MONTFORD POINT T-ESD-1 MONT-SW-89134_Win10_V3R5_20251217-201218.ckl
Unassigned 2026-03-04T15:25:42.339596 View in Context
USNS MONTFORD POINT T-ESD-1 MONT-SW-89108_Win10_V3R5_20251217-203019.ckl
Unassigned 2026-03-04T15:25:16.342077 View in Context
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_Win10_V3R4_20251023-141133.ckl
Unassigned 2026-01-14T12:57:28.689048 View in Context
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_Win10_V3R4_20251023-142421.ckl
Unassigned 2026-01-14T12:57:26.690022 View in Context
CUI