Skip to content
OpenAdvisories
Critical · 9.0 CVE-2021-23155 EUVD-2021-10267GHSA-mqv2-j79j-4gqf

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command C…

Published Nov 18, 2021 · Updated Sep 17, 2024 · Assigned by Gallagher

Vendor: Gallagher Product: Command Centre Mobile Client for Android Platform: Android

Description

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions.

Affected products

VendorProductAffectedFixed
Gallagher Command Centre Mobile Client for Android unspecified – ≤ 8.50, 8.60 – < 8.60.065 8.60.065

References