CCE-96678-8Platform: cpe:/o:microsoft:windows_11 | Date: (C)2022-05-07 (M)2023-07-04 |
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Digest authentication.
If you enable this policy setting, the WinRM client will not use Digest authentication.
If you disable or do not configure this policy setting, the WinRM client will use Digest authentication.
Countermeasure:
Enable this policy setting.
Potential Impact:
If you enable this policy setting, the WinRM client will not use Digest authentication.
If you disable or do not configure this policy setting, the WinRM client will use Digest authentication."
Parameter:
[yes/no]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Remote Management (WinRM)\WinRM Client\Disallow Digest authentication
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client!AllowDigest
CCSS Severity: | CCSS Metrics: |
CCSS Score : 8.1 | Attack Vector: NETWORK |
Exploit Score: 2.2 | Attack Complexity: HIGH |
Impact Score: 5.9 | Privileges Required: NONE |
Severity: HIGH | User Interaction: NONE |
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: HIGH |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:79338 |