CVE-2023-2809 - CVE House
Back to Database
Status published High CVE-2023-2809

Use of Cleartext credentials in Sage 200 Spain

Vulnerability Description

Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obtain remote execution of MS SQL commands and escalate privileges on Windows systems because the credentials are stored in plaintext.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-2809

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Juan González

References

More from Sage

View All →
CVE-2025-1887
SMB forced authentication vulnerability in Sage 200 Spain
High 7.1
CVE-2025-1886
Pass-Back vulnerability in Sage 200 Spain
High 7.1
CVE-2020-7390
Sage X3 Syracuse Persistent XSS in Edit User page
Medium 4.6
CVE-2020-7389
Sage X3 Syracuse Missing Authentication for Critical Function in Developer Environment
Medium 5.5
CVE-2020-7388
Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing
Critical 10

Affected Vendor

Affected Software

Sage 200 Spain
Vulnerable Versions:
2023.38.001

Timeline

Official Publish: October 4th, 2023
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-312

MITRE ATT&CK TTPs

T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1530 Data from Cloud Storage
Collection
T1078 Valid Accounts
Persistence
T1041 Exfiltration Over C2 Channel
Exfiltration