[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-35812-7

Platform: cpe:/o:microsoft:windows_8.1Date: (C)2015-10-14   (M)2023-07-04



Enable LSA Protection Use this setting to configure additional protection for the Local Security Authority (LSA) process to prevent code injection that could compromise credentials. On x86-based or x64-based devices that use Secure Boot and UEFI, a UEFI variable is set in the UEFI firmware when LSA protection is enabled by using the registry key. When the setting is stored in the firmware, the UEFI variable cannot be deleted or changed in the registry key. The UEFI variable must be reset. x86-based or x64-based devices that do not support UEFI or Secure Boot are disabled, cannot store the configuration for LSA protection in the firmware, and rely solely on the presence of the registry key. In this scenario, it is possible to disable LSA protection by using remote access to the device. If you enable this setting, LSA protection is enabled. If you disable or do not configure this setting, LSA protection is not enabled. For more information, see http://technet.microsoft.com/en-us/library/dn408187.aspx


Parameter:

[enable/disable]


Technical Mechanism:

(1) GPO: Computer ConfigurationAdministrative TemplatesSCM: Pass the Hash Mitigations!Enable LSA Protection (2) REG: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa!RunAsPPL

CCSS Severity:CCSS Metrics:
CCSS Score : 4.8Attack Vector: NETWORK
Exploit Score: 2.2Attack Complexity: HIGH
Impact Score: 2.5Privileges Required: NONE
Severity: MEDIUMUser Interaction: NONE
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:LScope: UNCHANGED
 Confidentiality: LOW
 Integrity: NONE
 Availability: LOW
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:29989


OVAL    1
oval:org.secpod.oval:def:29989
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_8_1

© SecPod Technologies