AnsweredAssumed Answered

QID90195 Windows Registry Key Access Denied

Question asked by Herbon Lavera on Jul 27, 2015

Despite having all the right permissions configured, I am still seeing lots of residual findings for this informational QID when conducting authenticated scans.

There appear to be two kinds of registry key involved. They will vary only in the value of the hexadecimal string in the middle, and they are all of the form:

 

HKLM\System\CurrentControlSet\Control\Class\{4D36E96A-E325-11CE-BFC1-08002BE10318}\Properties\MatchingDeviceID

or

HKLM\System\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}\Properties\

 

Problem is, I asked the admin about it and he says that key doesn't even exist on the system.

Can someone from Qualys please advise which specific vulnerability check(s) would be generating a query for that key, and any other info that may be useful in fault finding?

Outcomes