[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-34095-0

Platform: win8.1Date: (C)2015-10-14   (M)2022-10-10



Hide mechanisms to remove zone information This policy setting allows you to manage whether users can manually remove the zone information from saved file attachments. Typically, users can either click the Unblock button in the file?s Property sheet or select a check box in the Security Warning dialog. If the zone information is removed, users can open potentially dangerous file attachments that Windows has prevented users from opening. When the Hide mechanisms to remove zone information setting is enabled, Windows hides the check box and Unblock button. When this policy setting is disabled, Windows displays the check box and the Unblock button. Because dangerous attachments are often downloaded from untrusted Internet Explorer zones such as the Internet zone, Microsoft recommends that you configure this policy setting to Enabled to help ensure that as much security information as possible is retained with each file. Note To configure whether files are saved with zone information, see the Do not preserve zone information in file attachments setting.


Parameter:


Technical Mechanism:

(1) GPO: User Configuration\Administrative Templates\Windows Components\Attachment Manager!Hide mechanisms to remove zone information (2) REG: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties

CCSS Severity:CCSS Metrics:
CCSS Score : Attack Vector:
Exploit Score: Attack Complexity:
Impact Score: Privileges Required:
Severity: User Interaction:
Vector: Scope:
 Confidentiality:
 Integrity:
 Availability:
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:29245
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:29245
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:29245
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:29245


OVAL    1
oval:org.secpod.oval:def:29245

© SecPod Technologies