CVE-2023-4538

Summary

CVE-2023-4538 is a vulnerability affecting Comarch ERP XL from versions 2020.2.2 to 2023.2. The issue lies in the storage of database access credentials, which are encrypted with a shared key and located in a common table. An attacker gaining access to this table can decrypt and retrieve plain text passwords, potentially compromising the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.