CCE-26003-4| Platform: cpe:/o:microsoft:windows_server_2012:- | Date: (C)2022-08-12 (M)2023-07-04 |
Turn off downloading of print drivers over HTTP
This policy setting specifies whether to allow this client to download print driver packages over HTTP.
To set up HTTP printing, non-inbox drivers need to be downloaded over HTTP.
Note: This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP. It only prohibits downloading drivers that are not already installed locally.
If you enable this policy setting, print drivers cannot be downloaded over HTTP.
If you disable or do not configure this policy setting, users can download print drivers over HTTP.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: User ConfigurationAdministrative TemplatesSystemInternet Communication ManagementInternet Communication settings!Turn off downloading of print drivers over HTTP
(2) REG: HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindows NTPrinters!DisableWebPnPDownload
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.3 | Attack Vector: NETWORK |
| Exploit Score: 3.9 | Attack Complexity: LOW |
| Impact Score: 1.4 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:82855 |
