[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-33398-9

Platform: cpe:/o:microsoft:windows_8.1Date: (C)2015-10-14   (M)2023-07-04



Allow local activation security check exemptions Allows you to specify that local computer administrators can supplement the 'Define Activation Security Check exemptions' list. If you enable this policy setting, and DCOM does not find an explicit entry for a DCOM server application id (appid) in the 'Define Activation Security Check exemptions' policy (if enabled), DCOM will look for an entry in the locally configured list. If you disable this policy setting, DCOM will not look in the locally configured DCOM activation security check exemption list. If you do not configure this policy setting, DCOM will only look in the locally configured exemption list if the 'Define Activation Security Check exemptions' policy is not configured.


Parameter:

[enable/disable]


Technical Mechanism:

(1) GPO: Computer ConfigurationAdministrative TemplatesSystemDistributed COMApplication Compatibility Settings!Allow local activation security check exemptions (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindows NTDCOMAppCompat!AllowLocalActivationSecurityCheckExemptionList

CCSS Severity:CCSS Metrics:
CCSS Score : 2.2Attack Vector: NETWORK
Exploit Score: 0.7Attack Complexity: HIGH
Impact Score: 1.4Privileges Required: HIGH
Severity: LOWUser Interaction: NONE
Vector: AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:NScope: UNCHANGED
 Confidentiality: LOW
 Integrity: NONE
 Availability: NONE
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:28863


OVAL    1
oval:org.secpod.oval:def:28863
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_8_1

© SecPod Technologies