Details

Enables the Microsoft Edge AutoFill feature and lets users auto complete credit card information in web forms using previously stored information.

If this policy is disabled, AutoFill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.

If this policy is enabled or not configured, users can control AutoFill for credit cards.

Solution

Set the policy value for ‘Computer Configuration/Administrative Templates/Microsoft Edge/Enable AutoFill for credit cards’ to ‘disabled’.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Edge_V1R4_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-7a.
• CAT|II
• CCI|CCI-000381
• Rule-ID|SV-235745r626523_rule
• STIG-ID|EDGE-00-000028
• Vuln-ID|V-235745

Source

• Tenable.com/audits