Ansible playbook to remedidate CVE-2013-3900

CVE-2013-3900.yml

---
# Remediate WinVerifyTrust Signature Validation Vulnerability
# URL https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900
- hosts: win
  tasks:
  - name: Create registry path Wintrust
    ansible.windows.win_regedit:
      path: HKLM:\Software\Microsoft\Cryptography\Wintrust\
    
  - name: Create registry path Config
    ansible.windows.win_regedit:
      path: HKLM:\Software\Microsoft\Cryptography\Wintrust\Config
    
  - name: Add EnableCertPaddingCheck
    ansible.windows.win_regedit:
      path: HKLM:\Software\Microsoft\Cryptography\Wintrust\Config
      name: EnableCertPaddingCheck
      data: 1
      type: dword
    
  - name: Create registry path Wow6432Node Wintrust
    ansible.windows.win_regedit:
     path: HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\
    
  - name: Create registry path Wow6432Node Config
    ansible.windows.win_regedit:
     path: HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config
    
  - name: Add Wow6432Node EnableCertPaddingCheck
    ansible.windows.win_regedit:
      path: HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config
      name: EnableCertPaddingCheck
      data: 1
      type: dword