CCE-98590-3| Platform: cpe:/o:microsoft:windows_10 | Date: (C)2022-06-03 (M)2023-07-04 |
Denies access to the retail catalog in the Microsoft Store, but displays the private store.
If you enable this setting, users will not be able to view the retail catalog in the Microsoft Store, but they will be able to view apps in the private store.
If you disable or dont configure this setting, users can access the retail catalog in the Microsoft Store.
Fix:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsStoreOnly display the private store within the Microsoft Store
(2) REG: HKEY_LOCAL_MACHINE or HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsStore!RequirePrivateStoreOnly
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Store\Only display the private store within the Microsoft Store
(2) REG: HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsStore!RequirePrivateStoreOnly
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.0 | Attack Vector: NETWORK |
| Exploit Score: 1.6 | Attack Complexity: HIGH |
| Impact Score: 3.4 | Privileges Required: LOW |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: LOW |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:80716 |
