CVE-2023-4539

Published: Feb 15, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Comarch ERP XL installations. This issue affects ERP XL: from 2020.2.2 through 2023.2.

Affected (1)

Products: Comarch: Erp Xl

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Comarch Erp Xl	From 2020.2.2 to 2023.2

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

https://cert.pl/en/posts/2024/02/CVE-2023-4537/

Source: cvd@cert.pl

Third Party Advisory

https://cert.pl/posts/2024/02/CVE-2023-4537/

Source: cvd@cert.pl

Third Party Advisory

https://cert.pl/en/posts/2024/02/CVE-2023-4537/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cert.pl/posts/2024/02/CVE-2023-4537/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.