Skip to content
OpenAdvisories
High · 8.1 CVE-2021-23193 EUVD-2021-10300GHSA-m8p2-hv4r-pg48

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators…

Published Nov 18, 2021 · Updated Sep 17, 2024 · Assigned by Gallagher

Description

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3) ; 8.40 versions prior to 8.40.2063 (MR4); 8.30 versions prior to 8.30.1454 (MR4) ; 8.20 versions prior to 8.20.1291 (MR6); version 8.10 and prior versions.

Affected products

VendorProductAffectedFixed
Gallagher Command Centre unspecified – ≤ 8.10, 8.50 – < 8.50.2048 (MR3), 8.40 – < 8.40.2063 (MR4), 8.30 – < 8.30.1454 (MR4), 8.20 – < 8.20.1291 (MR6) 8.50.2048 (MR3)

References