[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-36310-1

Platform: win2012r2Date: (C)2015-10-08   (M)2022-10-10



Allow Basic authentication This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication. If you enable this policy setting, the WinRM client will use Basic authentication. If WinRM is configured to use HTTP transport, then the user name and password are sent over the network as clear text. If you disable or do not configure this policy setting, then the WinRM client will not use Basic authentication.


Parameter:


Technical Mechanism:

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Remote Management (WinRM)\WinRM Client!Allow Basic authentication (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client!AllowBasic

CCSS Severity:CCSS Metrics:
CCSS Score : Attack Vector:
Exploit Score: Attack Complexity:
Impact Score: Privileges Required:
Severity: User Interaction:
Vector: Scope:
 Confidentiality:
 Integrity:
 Availability:
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27421
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27421
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27421
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27421


OVAL    1
oval:org.secpod.oval:def:27421
XCCDF    1
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_Server_2012_R2

© SecPod Technologies