V-251546
CAT IFirefox must be configured to allow only TLS 1.2 or above.
- Ships Affected
- 1
- Total Findings
- 4
- Open
- 0
- Closed
- 4
Check Text
Type "about:policies" in the browser window.
If "SSLVersionMin" is not displayed under Policy Name or the Policy Value is not "tls1.2" or "tls1.3", this is a finding.
Fix Text
Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\
Policy Name: Minimum SSL version enabled
Policy State: Enabled
Policy Value: TLS 1.2 (or TLS 1.3)
macOS "plist" file:
Add the following:
<key>SSLVersionMin</key>
<string>tls1.2</string> (or <string>tls1.3</string>)
Linux "policies.json" file:
Add the following in the policies section:
"SSLVersionMin": "tls1.2" or ("SSLVersionMin": "tls1.3")
STIG Reference
- STIG
- Mozilla Firefox Security Technical Implementation Guide
- Version
- 6
- Release
- 7
- Rule ID
- SV-251546r961869_rule
All Occurrences
This vulnerability appears on 1 ship(s)
| Ship | Hull # | Source File | Status | Assigned To | Scan Date | Actions |
|---|---|---|---|---|---|---|
| USNS MONTFORD POINT | T-ESD-1 | MONT-SW-89134_Firefox_V6R6_20251217-201244.ckl | Unassigned | 2026-03-04T15:25:41.899130 | View in Context | |
| USNS MONTFORD POINT | T-ESD-1 | MONT-SW-89108_Firefox_V6R6_20251217-203042.ckl | Unassigned | 2026-03-04T15:25:15.868210 | View in Context | |
| USNS MONTFORD POINT | T-ESD-1 | _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_Firefox_V6R6_20251023-141154.ckl | Unassigned | 2026-01-14T12:57:27.870047 | View in Context | |
| USNS MONTFORD POINT | T-ESD-1 | _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_Firefox_V6R6_20251023-142444.ckl | Unassigned | 2026-01-14T12:57:25.596878 | View in Context |