Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HR Systems Strategies info:HR HRIS 加密问题漏洞
Vulnerability Description
HR HRIS（Human Resources Information System）是加拿大HR Systems Strategies公司的一套人力资源管理系统。该系统包括人事日常事务、薪酬、招聘等模块，并可对人力资源管理方面进行分析、规划、实施、调整。 HR Systems Strategies info:HR HRIS 7.9版本中存在加密问题漏洞，该漏洞源于程序没有正确保护数据库密码。本地攻击者可借助USERPW注册表的访问权限绕过混淆技术，利用该漏洞绕过既定的数据库访问限制。
CVSS Information
N/A
Vulnerability Type
N/A