Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-46686 EUVD-2023-50874GHSA-xxmw-m6v2-9h47

A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Dia…

Published Dec 18, 2023 · Updated Oct 1, 2024 · Assigned by Gallagher

Description

A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Diagnostics Service to use less secure communication protocols.

This issue affects: Gallagher Diagnostics Service prior to v1.3.0 (distributed in 9.00.1507(MR1)).

Affected products

VendorProductAffectedFixed
Gallagher Command Centre Diagnostics Service ≤ 1.3.0 —

References