CCE-26020-8| Platform: cpe:/o:microsoft:windows_server_2012:- | Date: (C)2022-08-12 (M)2023-07-04 |
This policy setting determines whether the Stored User Names and Passwords feature may save passwords or credentials for later use when it gains domain authentication. If you enable this policy setting, the Stored User Names and Passwords feature of Windows does not store passwords and credentials.
This policy setting controls authentication credential storage and passwords on the local system.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options!Network access: Do not allow storage of passwords and credentials for network authentication
(2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa!DisableDomainCreds
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 7.4 | Attack Vector: LOCAL |
| Exploit Score: 1.4 | Attack Complexity: HIGH |
| Impact Score: 5.9 | Privileges Required: NONE |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: HIGH |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:82862 |
