← CVE Intelligence

CVE-2024-21815

Gallagher / Command Centre Server PUBLISHED

Description (CNA)

Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users. This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6),  all version of 8.60 and prior.

Affected (CNA)

Vendor / productVersions
Gallagher / Command Centre Serveraffected 0 through 8.60; affected 9.00 before vEL9.00.1774 (MR2); affected 8.90 before vEL8.90.1751 (MR3); affected 8.80 before vEL8.80.1526 (MR4); affected 8.70 before vEL8.70.2526 (MR6)

CWE

CWE-522

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.