JRE8-WN-000120 – Oracle JRE 8 must enable the option to use an accepted sites list.
Details Utilizing a whitelist provides a configuration management method for allowing the execution of only authorized software. Using only authorized...
- Home
- Security Hardening
- DISA STIG Oracle JRE 8 Windows V2R1
DISA STIG Oracle JRE 8 Windows V2R1
JRE8-WN-000130 – Oracle JRE 8 must have an exception.sites file present.
Details Utilizing a whitelist provides a configuration management method for allowing the execution of only authorized software. Using only authorized...JRE8-WN-000150 – Oracle JRE 8 must enable the dialog to enable users to check publisher certificates for revocation – deployment.security.validation.crl
Details A certificate revocation list is a directory which contains a list of certificates that have been revoked for various...JRE8-WN-000150 – Oracle JRE 8 must enable the dialog to enable users to check publisher certificates for revocation – deployment.security.validation.crl.locked
Details A certificate revocation list is a directory which contains a list of certificates that have been revoked for various...JRE8-WN-000160 – Oracle JRE 8 must lock the option to enable users to check publisher certificates for revocation – deployment.security.revocation.check
Details Certificates may be revoked due to improper issuance, compromise of the certificate, and failure to adhere to policy. Therefore,...JRE8-WN-000160 – Oracle JRE 8 must lock the option to enable users to check publisher certificates for revocation – eployment.security.revocation.check.locked
Details Certificates may be revoked due to improper issuance, compromise of the certificate, and failure to adhere to policy. Therefore,...JRE8-WN-000170 – Oracle JRE 8 must prompt the user for action prior to executing mobile code – deployment.insecure.jres
Details Mobile code can cause damage to the system. It can execute without explicit action from, or notification to, a...JRE8-WN-000170 – Oracle JRE 8 must prompt the user for action prior to executing mobile code – deployment.insecure.jres.locked
Details Mobile code can cause damage to the system. It can execute without explicit action from, or notification to, a...JRE8-WN-000180 – The version of Oracle JRE 8 running on the system must be the most current available.
Details Oracle JRE 8 is being continually updated by the vendor in order to address identified security vulnerabilities. Running an...JRE8-WN-000080 – Oracle JRE 8 must disable the dialog enabling users to grant permissions to execute signed content from an untrusted authority – deployment.security.askgrantdialog.notinca.locked
Details Java applets exist both signed and unsigned. Even for signed applets, there can be many sources, some of which...