CCE-42551-2Platform: cpe:/o:microsoft:windows_10 | Date: (C)2016-09-23 (M)2023-07-04 |
Disable: 'Don't allow WebRTC to share the LocalHost IP address'
This setting lets you decide whether an employee's LocalHost IP address shows while making phone calls using the WebRTC protocol.
Turning this setting on hides an employee's LocalHost IP address while making phone calls using WebRTC.
Turning this setting off, or not configuring it, shows an employee's LocalHost IP address while making phone calls using WebRTC.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
The user's local IP address is hidden.
Parameter:
[On/Off]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsMicrosoft EdgeDon't allow WebRTC to share the LocalHost IP address
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftMicrosoftEdgeMainHideLocalHostIP
CCSS Severity: | CCSS Metrics: |
CCSS Score : 3.1 | Attack Vector: NETWORK |
Exploit Score: 1.6 | Attack Complexity: HIGH |
Impact Score: 1.4 | Privileges Required: NONE |
Severity: LOW | User Interaction: REQUIRED |
Vector: AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| Confidentiality: LOW |
| Integrity: NONE |
| Availability: NONE |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35142 |