CVE-2025-68420
HighSummary
The Comarch ERP Optima client connects to a database using a high privileged account regardless of the application account the user logs into. A local attacker controlling the client process can dump its memory, extract credentials, and gain privileged access to the database.
Risk Assessment
The risk to the organization involves the potential for unauthorized access to the database, which could lead to data leakage or modification. The attacker does not need to be logged in, increasing the potential threat.
Recommendation
It is recommended to update the application to version 2026.4 to mitigate this vulnerability. Additionally, consider restricting access to the client only to trusted users.
Other vulnerabilities in Comarch ERP Optima
Original NVD description (English source)
Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker who controls the client process to dump it's memory, extract credentials and use them to gain a privileged access to the database. In order to exploit this vulnerability, the client application has to be already configured, but a user does not have to be logged in. This issue has been fixed in version 2026.4