Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-23576 EUVD-2023-27676GHSA-5gjx-6hg3-323g

Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than inte…

Published Dec 18, 2023 · Updated Aug 2, 2024 · Assigned by Gallagher

Description

Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision.

This issue affects: Gallagher Command Centre: 8.90 prior to vEL8.90.1620 (MR2), 8.80 prior to vEL8.80.1369 (MR3), 8.70 prior to vEL8.70.2375 (MR5), 8.60 prior to vEL8.60.2550 (MR7), all versions of 8.50 and prior.

Affected products

VendorProductAffectedFixed
Gallagher Command Centre Server ≤ 8.50, 8.90 – < 8.90.1620 (MR2), 8.80 – < 8.80.1369 (MR3), 8.70 – < 8.70.2375 (MR5), 8.60 – < 8.60.2550 (MR7) 8.90.1620 (MR2)

References