CCE-96635-8| Platform: cpe:/o:microsoft:windows_11 | Date: (C)2022-05-07 (M)2023-07-04 |
This setting lets you decide whether an employee's LocalHost IP address shows while making phone calls using the WebRTC protocol.
Turning this setting on hides an employee's LocalHost IP address while making phone calls using WebRTC.
Turning this setting off, or not configuring it, shows an employee's LocalHost IP address while making phone calls using WebRTC.
Countermeasure:
Configure this setting depending on your organization's requirements.
Potential Impact:
The user's local IP address is hidden.
Parameter:
[enabled/disabled]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\Don t allow WebRTC to share the LocalHost IP address
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Main!HideLocalHostIP
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 2.5 | Attack Vector: LOCAL |
| Exploit Score: 1.0 | Attack Complexity: HIGH |
| Impact Score: 1.4 | Privileges Required: NONE |
| Severity: LOW | User Interaction: REQUIRED |
| Vector: AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:79379 |
