CCE-98041-7| Platform: cpe:/o:microsoft:windows_server_2022:::x64 | Date: (C)2022-06-07 (M)2023-07-04 |
This policy setting enables or disables clipboard sharing with the sandbox.
If you enable this policy setting, copy and paste between the host and Windows Sandbox are permitted.
If you disable this policy setting, copy and paste in and out of Sandbox will be restricted.
If you do not configure this policy setting, clipboard sharing will be enabled.
Fix:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows SandboxAllow clipboard sharing with Windows Sandbox
(2) REG: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsSandbox!AllowClipboardRedirection
Parameter:
[enabled/disabled]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Sandbox\Allow clipboard sharing with Windows Sandbox
(2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox!AllowClipboardRedirection
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 7.8 | Attack Vector: LOCAL |
| Exploit Score: 1.1 | Attack Complexity: HIGH |
| Impact Score: 6.0 | Privileges Required: LOW |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H | Scope: CHANGED |
| | Confidentiality: HIGH |
| | Integrity: HIGH |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:81292 |
