Details

This feature automatically detects when installed plugins are out of date and notifies the users to update the plugins.

Outdated plugins can be vulnerable or unstable, and can be exploited by malicious websites.

Solution

Perform the following procedure:

* Open the mozilla.cfg file in the installation directory with a text editor

* Add the following lines to mozilla.cfg:

lockPref(“plugins.update.notifyUser”, true);

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1158

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-4(5)

Source

• Tenable.com/audits