CCE-47749-7| Platform: cpe:/o:microsoft:windows_server_2016 | Date: (C)2022-09-02 (M)2023-07-04 |
This policy setting allows you to specify whether the Windows NTP Server is enabled.If you enable this policy setting for the Windows NTP Server, your computer can service NTP requests from other computers. If you disable or do not configure this policy setting, your computer cannot service NTP requests from other computers.Fix:(1) GPO: Computer ConfigurationAdministrative TemplatesSystemWindows Time ServiceTime ProvidersEnable Windows NTP Server(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftW32TimeTimeProvidersNtpServer!Enabled
Parameter:
[enabled/disabled]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\System\Windows Time Service\Time Providers\Enable Windows NTP Server
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\W32Time\TimeProviders\NtpServer!Enabled
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.9 | Attack Vector: NETWORK |
| Exploit Score: 2.2 | Attack Complexity: HIGH |
| Impact Score: 3.6 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | Scope: UNCHANGED |
| | Confidentiality: NONE |
| | Integrity: NONE |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:83683 |
