CVE-2020-7215

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre versions 7.x through 7.90.990 Gallagher Command Centre versions 8.00 through 8.00.1160 Gallagher Command Centre versions 8.10 through 8.10.1133

Description An issue was discovered where external system configuration data for third-party integrations, such as DVR systems, were logged in the Command Centre event trail. This allowed any authenticated operator with the 'view events' privilege to see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event.

Recommendations For Gallagher Command Centre versions 7.x through 7.90.990, update to version 7.90.991(MR5) or later. For Gallagher Command Centre versions 8.00 through 8.00.1160, update to version 8.00.1161(MR5) or later. For Gallagher Command Centre versions 8.10 through 8.10.1133, update to version 8.10.1134(MR4) or later.