CCE-99843-5| Platform: cpe:/o:microsoft:windows_server_2019 | Date: (C)2023-05-09 (M)2023-07-04 |
This policy setting lets you turn off cloud consumer account state content in all Windows experiences.
If you enable this policy, Windows experiences that use the cloud consumer account state content client component, will instead present the default fallback content.
If you disable or do not configure this policy, Windows experiences will be able to use cloud consumer account state content.
Fix:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsCloud ContentTurn off cloud consumer account state content
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsCloudContent!DisableConsumerAccountStateContent
Parameter:
[enabled/disabled]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Cloud Content\Turn off cloud consumer account state content
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent!DisableConsumerAccountStateContent
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.9 | Attack Vector: NETWORK |
| Exploit Score: 2.2 | Attack Complexity: HIGH |
| Impact Score: 3.6 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:89597 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:89592 |
