CCE-97086-3| Platform: cpe:/o:microsoft:windows_11 | Date: (C)2022-05-07 (M)2023-07-04 |
This policy specifies whether the widgets feature is allowed on the device.
Widgets will be turned on by default unless you change this in your settings.
If you turned this feature on before, it will stay on automatically unless you turn it off.
Fix:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsWidgetsAllow widgets
(2) REG: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftDsh!AllowNewsAndInterests
Parameter:
[enabled/disabled]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Widgets\Allow widgets
(2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh!AllowNewsAndInterests
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 3.1 | Attack Vector: NETWORK |
| Exploit Score: 1.6 | Attack Complexity: HIGH |
| Impact Score: 1.4 | Privileges Required: LOW |
| Severity: LOW | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:79828 |
