PT-2023-19055 · Gallagher · Gallagher Command Centre

CVE-2023-23576

·

Publicado

2023-12-18

·

Atualizado

2024-01-05

CVSS v3.1

4.3

Média

VetorAV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Gallagher Command Centre versions 8.50 and prior Gallagher Command Centre versions 8.60 prior to vEL8.60.2550 (MR7) Gallagher Command Centre versions 8.70 prior to vEL8.70.2375 (MR5) Gallagher Command Centre versions 8.80 prior to vEL8.80.1369 (MR3) Gallagher Command Centre versions 8.90 prior to vEL8.90.1620 (MR2)
Description Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision.
Recommendations For versions 8.50 and prior, update to a version later than the specified vulnerable versions. For versions 8.60 prior to vEL8.60.2550 (MR7), update to vEL8.60.2550 (MR7) or later. For versions 8.70 prior to vEL8.70.2375 (MR5), update to vEL8.70.2375 (MR5) or later. For versions 8.80 prior to vEL8.80.1369 (MR3), update to vEL8.80.1369 (MR3) or later. For versions 8.90 prior to vEL8.90.1620 (MR2), update to vEL8.90.1620 (MR2) or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-23576

Produtos afetados

Gallagher Command Centre