Beveiligingsadvies

CVE-2023-4538

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-15 08:32:44

Laatst bijgewerkt 2024-08-29 18:01:40

Toegewezen door CERT-PL

CVSS-score 6.2

Status PUBLISHED

Beschrijving

The database access credentials configured during installation are stored in a special table, and are encrypted with a shared key, same among all Comarch ERP XL client installations. This could allow an attacker with access to that table to retrieve plain text passwords. This issue affects ERP XL: from 2020.2.2 through 2023.2.

← Alle CVE's bekijken Bekijk op cve.org ↗