PT-2021-15396
CVE-2021-23162
·
تاريخ النشر
2021-11-18
·
تاريخ التحديث
2021-11-23
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Gallagher Command Centre Mobile Connect for Android versions prior to 15.04.040
Gallagher Command Centre Mobile Connect for Android version 14 and prior versions
Description
The issue is related to improper validation of the cloud certificate chain in Mobile Connect, which allows a man-in-the-middle attack to impersonate the legitimate Command Centre Server.
Recommendations
For versions prior to 15.04.040, update to version 15.04.040 or later to resolve the issue.
For version 14 and prior versions, update to a version later than 14 to mitigate the risk.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾