QwikSec

Security Database

CVE

CWE

Training

CVE-2024-4996

Published: Dec 18, 2024

Modified: Oct 7, 2025

PUBLISHED

Description

Use of a hard-coded password for a database administrator account created during Wapro ERP installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Wapro ERP installations. This issue affects Wapro ERP Desktop versions before 8.90.0.

Vendor	Product	Versions
Asseco Business Solutions S.A.	Wapro ERP Desktop	affected `0 - < 8.90.0`

Weaknesses (CWE)

References

https://cert.pl/en/posts/2024/12/CVE-2024-4995/

third-party-advisory

https://cert.pl/posts/2024/12/CVE-2024-4995/

third-party-advisory

https://wapro.pl/

product

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.