CCE-97131-7| Platform: cpe:/o:microsoft:windows_11 | Date: (C)2022-05-07 (M)2023-07-04 |
This policy setting determines whether or not the user can interact with Cortana using speech while the system is locked.
If you enable or don't configure this setting, the user can interact with Cortana using speech while the system is locked.
If you disable this setting, the system will need to be unlocked for the user to interact with Cortana using speech.
Fix:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsSearchAllow Cortana above lock screen
(2) REG: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindows Search!AllowCortanaAboveLock
Parameter:
[enabled/disabled]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana above lock screen
(2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search!AllowCortanaAboveLock
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.7 | Attack Vector: PHYSICAL |
| Exploit Score: 0.9 | Attack Complexity: LOW |
| Impact Score: 4.7 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: LOW |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:79826 |
