CVE-2021-23204

Summary

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP key material to be exposed to Command Centre Operators. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3).

Affected Software

VendorProductVersion RangeStatus
GallagherCommand Centre8.40 < 8.40.1888 (MR3)affected
GallagherCommand Centre8.30 < 8.30.1359 (MR3)affected

Weaknesses

  • CWE-200: CWE-200 Information Exposure

ADP Enrichment

CVE Program Container

Additional References

References