CVE-2023-4538

CVE-2023-4538 is a medium-severity vulnerability affecting Comarch ERP XL versions 2020.2.2 through 2023.2. It involves the insecure storage of database access credentials, which are encrypted with a shared key common across all client installations. An authenticated attacker with access to the relevant database table could decrypt these credentials, leading to unauthorized disclosure of sensitive information. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.