CCE-36641-9| Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Configure Report Archive
This setting controls the behavior of the Windows Error Reporting archive. If Archive behavior is set to 'Store all', all data collected for each report will be stored in the appropriate location. If Archive behavior is set to 'Store parameters only', only the minimum information required to check for an existing solution will be stored. The setting for 'Maximum number of reports to store' determines how many reports can be stored before old reports are automatically deleted. If this setting is disabled, no Windows Error Reporting information will be stored.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows Error ReportingAdvanced Error Reporting Settings!Configure Report Archive
(2) REG: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindows Error Reporting!DisableArchive
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 4.4 | Attack Vector: LOCAL |
| Exploit Score: 1.8 | Attack Complexity: LOW |
| Impact Score: 2.5 | Privileges Required: LOW |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27585 |
