Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DATEV Nutzungskontrolle未授权访问漏洞
Vulnerability Description
DATEV eG是一款税务相关系统，而Nutzungskontrolle (NUKO)用于对用户进行限制访问的软件，如一般用户不允许查看内部帐户数据。 DATEV Nutzungskontrolle对用户访问缺少正确的访问控制，远程攻击者可以利用这个漏洞未授权访问系统，获得敏感数据信息。 本地用户可以通过修改部分Windows的注册表键值，就可以绕过软件的安全模型，访问受限制数据。
CVSS Information
N/A
Vulnerability Type
N/A