CCE-37819-0| Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Microsoft File Server Shadow Copy Agent Service
Manages shadow copy of file shares taken by the VSS file server agent. If this service is stopped, file share shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.
Parameter:
[manual/disable/automatic]
Technical Mechanism:
(1) GPO: Computer ConfigurationWindows SettingsSecurity SettingsSystem Services!Microsoft File Server Shadow Copy Agent Service
(2) REG: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesfssagent!Start
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 6.5 | Attack Vector: NETWORK |
| Exploit Score: 2.8 | Attack Complexity: LOW |
| Impact Score: 3.6 | Privileges Required: LOW |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:22777 |
