CCE-99840-1| Platform: cpe:/o:microsoft:windows_server_2019 | Date: (C)2023-07-04 (M)2023-07-04 |
This policy setting lets you turn off cloud optimized content in all Windows experiences.
If you enable this policy, Windows experiences that use the cloud optimized content client component, will instead present the default fallback content.
If you disable or do not configure this policy, Windows experiences will be able to use cloud optimized content.
Fix:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsCloud ContentTurn off cloud optimized content
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsCloudContent!DisableCloudOptimizedContent
Parameter:
[enabled/disabled]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Cloud Content\Turn off cloud optimized content
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent!DisableCloudOptimizedContent
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.9 | Attack Vector: NETWORK |
| Exploit Score: 2.2 | Attack Complexity: HIGH |
| Impact Score: 3.6 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:82396 |
