CVE-2021-23211

Summary

Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption key to be discoverable in server memory dumps. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3).

Affected Software

VendorProductVersion RangeStatus
GallagherCommand Centre8.40 < 8.40.1888 (MR3)affected

Weaknesses

  • CWE-316: CWE-316

ADP Enrichment

CVE Program Container

Additional References

References