PT-2023-19055 · Gallagher · Gallagher Command Centre
CVE-2023-23576
·
Publicado
2023-12-18
·
Atualizado
2024-01-05
CVSS v3.1
4.3
Média
| Vetor | AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Gallagher Command Centre versions 8.50 and prior
Gallagher Command Centre versions 8.60 prior to vEL8.60.2550 (MR7)
Gallagher Command Centre versions 8.70 prior to vEL8.70.2375 (MR5)
Gallagher Command Centre versions 8.80 prior to vEL8.80.1369 (MR3)
Gallagher Command Centre versions 8.90 prior to vEL8.90.1620 (MR2)
Description
Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision.
Recommendations
For versions 8.50 and prior, update to a version later than the specified vulnerable versions.
For versions 8.60 prior to vEL8.60.2550 (MR7), update to vEL8.60.2550 (MR7) or later.
For versions 8.70 prior to vEL8.70.2375 (MR5), update to vEL8.70.2375 (MR5) or later.
For versions 8.80 prior to vEL8.80.1369 (MR3), update to vEL8.80.1369 (MR3) or later.
For versions 8.90 prior to vEL8.90.1620 (MR2), update to vEL8.90.1620 (MR2) or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gallagher Command Centre