CCE-35110-6| Platform: cpe:/o:microsoft:windows_8.1 | Date: (C)2015-10-14 (M)2023-07-04 |
Do not sync passwords
Prevent the 'passwords' group from syncing to and from this PC. This turns off and disables the 'passwords' group on the 'sync your settings' page in PC settings.
If you enable this policy setting, the 'passwords' group will not be synced.
Use the option 'Allow users to turn passwords syncing on' so that syncing it turned off by default but not disabled.
If you do not set or disable this setting, syncing of the 'passwords' group is on by default and configurable by the user.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsSync your settings!Do not sync passwords
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsSettingSync!DisableCredentialsSettingSync
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 6.1 | Attack Vector: LOCAL |
| Exploit Score: 1.8 | Attack Complexity: LOW |
| Impact Score: 4.2 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: REQUIRED |
| Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:29707 |
