PT-2013-5445 · Hr Systems Strategies · Info:Hr Hris

Chris Mayhew · Published 2013-10-16 · Updated 2013-10-16 · CVE-2013-5208

Positive Technologies (AI Summary)

CVSS v2.0

4.1

Medium

Base vector

AV:L/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HR Systems Strategies info:HR HRIS version 7.9

Description The issue allows local users to bypass intended database restrictions. This is achieved by accessing the USERPW registry key and bypassing an unspecified obfuscation technique, which does not properly protect the database password.

Recommendations For HR Systems Strategies info:HR HRIS version 7.9, consider restricting access to the USERPW registry key to minimize the risk of exploitation. Additionally, review and enhance the database password protection mechanism to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2013-5208

Affected Products

Info:Hr Hris

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-5208 · Security Note
• http://kb.cert.org/vuls/id/829574 · Note