CCE-43805-1Platform: cpe:/o:microsoft:windows_10 | Date: (C)2016-09-23 (M)2023-07-04 |
Specify the 'Configure corporate Home pages' (ProvisionedHomePages URLS) value
This setting lets you configure your corporate Home pages for domain-joined devices. Your employees can change this setting.
Turning this setting on lets you configure one or more corporate Home pages. If this setting is turned on, you must also include URLs to the pages, separating multiple pages by using angle brackets and this format:
<support.contoso.com><support.microsoft.com>
Turning this setting off, or not configuring it, sets your default Home page to the webpage you specified in App settings.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
Users will only be able to access the default Home page.
Parameter:
[Provisioned Home Pages URL]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsMicrosoft EdgeConfigure corporate Home pages
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftMicrosoftEdgeInternet SettingsProvisionedHomePages
CCSS Severity: | CCSS Metrics: |
CCSS Score : 4.0 | Attack Vector: LOCAL |
Exploit Score: 2.5 | Attack Complexity: LOW |
Impact Score: 1.4 | Privileges Required: NONE |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| Confidentiality: LOW |
| Integrity: NONE |
| Availability: NONE |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35317 |