← CVE Intelligence

CVE-2023-4537

Protocol Downgrade in Comarch ERP XL PUBLISHED

Description (CNA)

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects ERP XL: from 2020.2.2 through 2023.2.

Affected (CNA)

Vendor / productVersions
Comarch / ERP XLaffected 2020.2.2 through 2023.2

CWE

CWE-755

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.