VDB
GCVE-110-CERTCC-2013-829574
GCVE-110-CERTCC-2013-829574
Advisory PublishedCVSS 4.1/10
HR Systems Strategies info:HR HRIS 7.9 and possibly earlier versions allow read access to a weakly obfuscated database password. This password is shared by all clients within an info:HR site. A local attacker can decipher the password and gain complete control of the database and application, including access to sensitive personally identifiable information (PII).
Risk Scores
CVSS 2.0
4.1/10
Medium · AV:L/AC:M/Au:S/C:P/I:P/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population1d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score3.7remediation_levelWreport_confidenceCenvironmental_score1.1target_distributionLenvironmental_vectorCDP:L/TD:L/CR:ND/IR:ND/AR:ND
References
HR Systems Strategies info:HR HRIS allows read access to weakly obfuscated shared database password
url
HR Systems Strategies info:HR HRIS allows read access to weakly obfuscated shared database password
url
Browse GCVE Records
73,161 records in the GCVE database · Updated July 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.