Details

The Recovery Console SET command allows environment variables to be set in the Recovery Console. This permits access to all drives and folders and the copying of files to removable media which could expose sensitive information.

Solution

Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> ‘Recovery Console- Allow floppy copy and access to all drives and all folders’ to ‘Disabled’.

Supportive Information

The following resource is also helpful.

• http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.
• CAT|III
• CCI|CCI-000366
• CSCv6|3.1
• Rule-ID|SV-29019r2_rule
• STIG-ID|3.048
• Vuln-ID|V-1158

Source

• Tenable.com/audits