What is the CVSS score of CVE-2013-5208?

CVE-2013-5208 has a CVSS 2.0 base score of 4.1 (Medium). CVSS vector: AV:L/AC:M/Au:S/C:P/I:P/A:P. EPSS exploitation probability: 0.0%.

Hr Human Resource Information System CVE-2013-5208

MEDIUM

Cryptographic Issues (CWE-310)

2013-10-16 cve@mitre.org

Authentication Bypass Hr Human Resource Information System

4.1

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.1 MEDIUM

AV:L/AC:M/Au:S/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:S/C:P/I:P/A:P

Attack Vector

Local

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Oct 16, 2013 - 10:52 cve.org

MEDIUM 4.1

DescriptionCVE.org

HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-310. HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique. Affected products include: Infohr Hr Human Resource Information System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.