Vulnerability Description
Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker who controls the client process to dump it's memory, extract credentials and use them to gain a privileged access to the database. In order to exploit this vulnerability, the client application has to be already configured, but a user does not have to be logged in. This issue has been fixed in version 2026.4
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-68420?
CVE-2025-68420 is a documented vulnerability. Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker who controls the clie...
How severe is CVE-2025-68420?
CVSS scoring is not yet available for CVE-2025-68420. Check NVD for updates.
Is there a patch for CVE-2025-68420?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.