QID 45528
Date Published: 2022-04-29
QID 45528: Microsoft Windows Scheduled Tasks Missing Security Descriptor
The Task Scheduler enables you to automatically perform routine tasks on a chosen computer. The security descriptor (SD) determines the users allowed to run the task and to guard access to an object as well as to control which type of auditing takes place when it is accessed.
The QID checks for Scheduled tasks that are missing the corresponding Security Descriptor.
QID detection Logic:
The QID looks in the registry hive "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree" and checks if a task is missing Security Descriptor (value: SD). Currently, the QID checks this information one level down for the mentioned registry hive.
N/A
Solution
N/A
Vendor References
CVEs related to QID 45528
Software Advisories
| Advisory ID | Software | Component | Link |
|---|