CVE-2023-4539

Summary

CVE-2023-4539 is a vulnerability in Comarch ERP XL, affecting versions from 2020.2.2 to 2023.2. The issue stems from a hard-coded password used for a database account created during installation. An attacker can exploit this weakness to gain unauthorized access and retrieve sensitive data stored in the database. All Comarch ERP XL installations use the same password, increasing the risk for potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.