CCE-15105-0| Platform: cpe:/o:microsoft:windows_10 | Date: (C)2010-09-25 (M)2023-07-04 |
Installation of Internet Information System (IIS) may allow unauthorized internet services to be hosted. Websites must only be hosted on servers that have been designed for that purpose and can be adequately secured.
Fix:
Uninstall "Internet Information Services" or "Internet Information Services Hostable Web Core" from the system.
Parameter:
[yes/no]
Technical Mechanism:
Uninstall "Internet Information Services" or "Internet Information Services Hostable Web Core" from the system.
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 7.8 | Attack Vector: LOCAL |
| Exploit Score: 1.8 | Attack Complexity: LOW |
| Impact Score: 5.9 | Privileges Required: LOW |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: HIGH |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:85531 |
