[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-33356-7

Platform: cpe:/o:microsoft:windows_8.1Date: (C)2015-10-14   (M)2023-07-04



Specify channel binding token hardening level This policy setting allows you to set the hardening level of the Windows Remote Management (WinRM) service with regard to channel binding tokens. If you enable this policy setting, the WinRM service uses the level specified in HardeningLevel to determine whether or not to accept a received request, based on a supplied channel binding token. If you disable or do not configure this policy setting, you may configure the hardening level locally on each computer. If HardeningLevel is set to Strict, any request not containing a valid channel binding token will be rejected. If HardeningLevel is set to Relaxed (default value), any request containing an invalid channel binding token will be rejected. However, a request that does not contain any channel binding token will be accepted (though it will not be protected from credential-forwarding attacks). If HardeningLevel is set to None, all requests will be accepted (though they will not be protected from credential-forwarding attacks).


Parameter:

[enable/disable]


Technical Mechanism:

(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows Remote Management (WinRM)WinRM Service!Specify channel binding token hardening level (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWinRMService!CBTHardeningLevelStatus

CCSS Severity:CCSS Metrics:
CCSS Score : 8.0Attack Vector: ADJACENT_NETWORK
Exploit Score: 2.1Attack Complexity: LOW
Impact Score: 5.9Privileges Required: LOW
Severity: HIGHUser Interaction: NONE
Vector: AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HScope: UNCHANGED
 Confidentiality: HIGH
 Integrity: HIGH
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:28835


OVAL    1
oval:org.secpod.oval:def:28835
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_8_1

© SecPod Technologies