Adobe Reader DC must disable all service access to Document Cloud Services.

From Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide

Associated with: CCI-000381

SV-79429r1_rule Adobe Reader DC must disable all service access to Document Cloud Services.

Vulnerability discussion

By default, Adobe online services are tightly integrated in Adobe Reader DC. With the integration of Adobe Document Cloud, disabling this feature prevents the risk of additional attack vectors.Within Adobe Reader DC, the Adobe Cloud resources require a paid subscription for each service.

Check content

Fix text

Configure the following registry value: Note: The Key Name "cServices" is not created by default in the Adobe Reader DC install and must be created. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices Value Name: bToggleAdobeDocumentServices Type: REG_DWORD Value: 1

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.