[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-26055-4

Platform: cpe:/o:microsoft:windows_server_2012:-Date: (C)2022-08-12   (M)2023-07-04



This policy setting determines the default consent behavior of Windows Error Reporting. If you enable this policy setting, you can set the default consent handling for error reports. The following list describes the Consent level settings that are available in the pull-down menu in this policy setting: - Always ask before sending data: Windows prompts users for consent to send reports. - Send parameters: Only the minimum data that is required to check for an existing solution is sent automatically, and Windows prompts users for consent to send any additional data that is requested by Microsoft. - Send parameters and safe additional data: the minimum data that is required to check for an existing solution, along with data which Windows has determined (within a high probability) does not contain personally-identifiable information is sent automatically, and Windows prompts the user for consent to send any additional data that is requested by Microsoft. - Send all data: any error reporting data requested by Microsoft is sent automatically. If this policy setting is disabled or not configured, then the consent level defaults to the highest-privacy setting: Always ask before sending data. Countermeasure: Configure this setting depending on your organization's requirements. Potential Impact: The user may or may not receive consent notifications depending on configuration.


Parameter:

[always ask before sending data/send parameters/send parameters and safe additional data]


Technical Mechanism:

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Error Reporting\Consent\Configure Default consent (2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultConsent

CCSS Severity:CCSS Metrics:
CCSS Score : 3.7Attack Vector: NETWORK
Exploit Score: 2.2Attack Complexity: HIGH
Impact Score: 1.4Privileges Required: NONE
Severity: LOWUser Interaction: NONE
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NScope: UNCHANGED
 Confidentiality: LOW
 Integrity: NONE
 Availability: NONE
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:82889


OVAL    1
oval:org.secpod.oval:def:82889
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_2012

© SecPod Technologies