CVE-2024-42407 - Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access

Back Back to CVE browser

HIGH

Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access

Published Dec 12, 2024

8.5

HIGH

CVSS 3.1

EPSS 0.32%

Description

Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access.

This issue affects: Command Centre Server 9.10 prior to 9.10.2149 (MR4), 9.00 prior to 9.00.2374 (MR5), 8.90 prior to 8.90.2356 (MR6), all versions of 8.80 and prior.

Affected products

Vendor Gallagher Product Command Centre Server Default
affected
Affected
- ≥ 0, ≤ 8.80
- ≥ 8.90, < 8.90.2356 (MR6)
- ≥ 9.00, < 9.00.2374 (MR5)
- ≥ 9.10, < 9.10.2149 (MR4)