PT-2013-5445 · Hr Systems Strategies · Info:Hr Hris

Chris Mayhew · Publicado 2013-10-16 · Atualizado 2013-10-16 · CVE-2013-5208

Positive Technologies (AI Summary)

CVSS v2.0

4.1

Média

Vetor base

AV:L/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HR Systems Strategies info:HR HRIS version 7.9

Description The issue allows local users to bypass intended database restrictions. This is achieved by accessing the USERPW registry key and bypassing an unspecified obfuscation technique, which does not properly protect the database password.

Recommendations For HR Systems Strategies info:HR HRIS version 7.9, consider restricting access to the USERPW registry key to minimize the risk of exploitation. Additionally, review and enhance the database password protection mechanism to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-5208

Produtos afetados

Info:Hr Hris

Referências · 2

• http://kb.cert.org/vuls/id/829574 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-5208 · Nota de Segurança