Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to…
Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible f…
Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data s…
The database access credentials configured during installation are stored in a special table, and are encrypted with a shared key, same among all Comarch ERP X…
Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data…