CCE-98568-9| Platform: cpe:/o:microsoft:windows_10 | Date: (C)2022-06-03 (M)2023-07-04 |
This policy setting determines whether Clipboard contents can be synchronized across devices.
If you enable this policy setting, Clipboard contents are allowed to be synchronized across devices logged in under the same Microsoft account or Azure AD account.
If you disable this policy setting, Clipboard contents cannot be shared to other devices.
Policy change takes effect immediately.
Fix:
(1) GPO: Computer ConfigurationAdministrative TemplatesSystemOS PoliciesAllow Clipboard synchronization across devices
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsSystem!AllowCrossDeviceClipboard
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\System\OS Policies\Allow Clipboard synchronization across devices
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!AllowCrossDeviceClipboard
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 7.7 | Attack Vector: NETWORK |
| Exploit Score: 2.2 | Attack Complexity: HIGH |
| Impact Score: 5.5 | Privileges Required: NONE |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: HIGH |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:80694 |
