Ensure global .NET trust level is configured

MediaNivel 1Automatizadaiis

Descripción

An application's trust level determines the permissions that are granted by the ASP.NET code access security (CAS) policy. CAS defines two trust categories: full trust and partial trust. An application that has full trust permissions may access all resource types on a server and perform privileged operations, while applications that run with partial trust have varying levels of operating permissions and access to ... The global .NET trust level (root web.config) must be Medium (Low and Minimal are stricter and also accepted); the default Full fails. PowerShell 5.1 with the WebAdministration module; run elevated.

Cómo se verifica

Método de auditoría: Comando de shell

shell

Import-Module WebAdministration -ErrorAction Stop; $c = Get-WebConfiguration -Filter 'system.web/trust' -PSPath 'MACHINE/WEBROOT'; if ([string]$c.level -in @('Medium', 'Low', 'Minimal')) { 'compliant' } else { 'noncompliant' }

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Set-WebConfigurationProperty -PSPath 'MACHINE/WEBROOT' -Filter system.web/trust -Name level -Value Medium

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: iisaspnet
Referencia: CIS Microsoft IIS 10 Benchmark v1.2.1 - 3.10 Ensure global .NET trust level is configured

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target iis