CCE-97620-9| Platform: cpe:/o:microsoft:windows_server_2022:::x64 | Date: (C)2022-06-07 (M)2023-07-04 |
This policy setting turns off the advertising ID, preventing apps from using the ID for experiences across apps.
If you enable this policy setting, the advertising ID is turned off. Apps can't use the ID for experiences across apps.
If you disable or do not configure this policy setting, users can control whether apps can use the advertising ID for experiences across apps.
Countermeasure:
Enable and configure this setting.
Potential Impact:
Users cannot use or control whether apps can use the advertising ID for experiences across apps.
Parameter:
[enabled/disabled]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\System\User Profiles\Turn off the advertising ID
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AdvertisingInfo!DisabledByGroupPolicy
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.9 | Attack Vector: NETWORK |
| Exploit Score: 2.2 | Attack Complexity: HIGH |
| Impact Score: 3.6 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:81023 |
