VulnerabilityModified
CVE-2013-5208
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.
MEDIUM 4.1EPSS 0.29%
Does this matter?
Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.
Description
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.
- CVSS 2.0
- 4.1 MEDIUMAV:L/AC:M/Au:S/C:P/I:P/A:P
- EPSS
- 0.29% probability · 22th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- infohr/hr human resource information system
- Source
- cve@mitre.org
References
- http://www.kb.cert.org/vuls/id/829574US Government Resource
- http://www.kb.cert.org/vuls/id/829574US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.