CCE-33263-5| Platform: cpe:/o:microsoft:windows_8.1 | Date: (C)2015-10-14 (M)2023-07-04 |
Turn On Compatibility HTTP Listener
This policy setting enables or disables an HTTP listener created for backward compatibility purposes in the Windows Remote Management (WinRM) service.
When certain port 80 listeners are migrated to WinRM 2.0, the listener port number changes to 5985.
A listener may be automatically created on port 80 to ensure backward compatibility.
When this setting is enabled, this listener always appears.
When this setting is disabled, this listener never appears.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows Remote Management (WinRM)WinRM Service!Turn On Compatibility HTTP Listener
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWinRMService!HttpCompatibilityListener
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 7.7 | Attack Vector: NETWORK |
| Exploit Score: 2.2 | Attack Complexity: HIGH |
| Impact Score: 5.5 | Privileges Required: NONE |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: HIGH |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28777 |
