CCE-47807-3Platform: cpe:/o:microsoft:windows_server_2016 | Date: (C)2022-09-02 (M)2023-07-04 |
If you enable this policy, Windows spotlight features like lock screen spotlight, suggested apps in Start menu or Windows tips will no longer suggest apps and content from third-party software publishers. Users may still see suggestions and tips to make them more productive with Microsoft features and apps.
If you disable or do not configure this policy, Windows spotlight features may suggest apps and content from third-party software publishers in addition to Microsoft apps and content.
Fix:
(1) GPO: User ConfigurationAdministrative TemplatesWindows ComponentsCloud ContentDo not suggest third-party content in Windows spotlight
(2) REG: HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsCloudContent!DisableThirdPartySuggestions
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: User Configuration\Administrative Templates\Windows Components\Cloud Content\Do not suggest third-party content in Windows spotlight
(2) REG: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent!DisableThirdPartySuggestions
CCSS Severity: | CCSS Metrics: |
CCSS Score : 5.3 | Attack Vector: NETWORK |
Exploit Score: 3.9 | Attack Complexity: LOW |
Impact Score: 1.4 | Privileges Required: NONE |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| Confidentiality: LOW |
| Integrity: NONE |
| Availability: NONE |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:83740 |