documentation_complete: true

title: 'Disable Outdated Plugins'

description: |-
    Outdated plugins should be disabled by setting <tt>AllowOutdatedPlugins</tt>
    to <tt>false</tt> in the Chromium policy file.

rationale: |-
    Running outdated plugins could lead to system compromise through the use
    of known exploits. Having plugins updated to the most current version
    ensures the smallest attack surfuce possible.

severity: unknown

identifiers:
    cce: ""

references:
    disa: ""
    nist: ""
    stigid: DTBC0013

ocil_clause: 'it is not disabled'

ocil: |-
    To verify that outdated plugins are disabled, run the following command:
    <pre>$ grep AllowOutdatedPlugins /etc/chromium/policies/managed/*.json</pre>
    The output should contain:
    <pre>"AllowOutdatedPlugins": false,</pre>
