vendor:
Nutzungskontrolle
by:
SecurityFocus
7.2
CVSS
HIGH
Access Validation Issue
264
CWE
Product Name: Nutzungskontrolle
Affected Version From: V.2.1
Affected Version To: V.2.2
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2002
DATEV Nutzungskontrolle Access Validation Issue
It has been reported that DATEV Nutzungskontrolle may be prone to a access validation issue that may allow a local attacker to gain access to sensitive data. The issue presents itself as a local user is able modify certain keys in the Windows registry resulting in bypassing the security model of the software. This issue would not present itself if the registry keys were set to read only. Successful exploitation of this issue may allow an attacker to gain access to sensitive data that could be used to launch further attacks against the system.
Mitigation:
Set the registry keys to read only.
