PT-2020-19469
CVE-2020-7215
·
تاريخ النشر
2020-01-20
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Gallagher Command Centre versions 7.x through 7.90.990
Gallagher Command Centre versions 8.00 through 8.00.1160
Gallagher Command Centre versions 8.10 through 8.10.1133
Description
An issue was discovered where external system configuration data for third-party integrations, such as DVR systems, were logged in the Command Centre event trail. This allowed any authenticated operator with the 'view events' privilege to see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event.
Recommendations
For Gallagher Command Centre versions 7.x through 7.90.990, update to version 7.90.991(MR5) or later.
For Gallagher Command Centre versions 8.00 through 8.00.1160, update to version 8.00.1161(MR5) or later.
For Gallagher Command Centre versions 8.10 through 8.10.1133, update to version 8.10.1134(MR4) or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾