CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2020-7215
https://notcve.org/view.php?id=CVE-2020-7215
20 Jan 2020 — An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party integrations such as DVR systems) were logged in the Command Centre event trail. Any authenticated operator with the 'view events' privilege could see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event. Se detectó un problema en Gallagher Comma... • https://security.gallagher.com/cve-2020-7215 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0CVE-2019-19802
https://notcve.org/view.php?id=CVE-2019-19802
17 Jan 2020 — In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied. En Gallagher Command Center Server versiones v8.10 anteriores a v8.10.1134(MR4), versiones v8.00 anteriores a v8.00.1161(MR5), versiones v7.90 anteriores a v7.90.991(MR5), versiones... • https://security.gallagher.com/cve-2019-19802 • CWE-862: Missing Authorization •
CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2019-19801
https://notcve.org/view.php?id=CVE-2019-19801
17 Jan 2020 — In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases. En Gallagher Command Center Server versiones v8.10 anteriores a v8.10.1134(MR4), versiones v8.00 anteriores a v8.00.1161(MR5), versiones v7.90 anteriores a v7.90.991(MR5), versiones v7.80 anteriores a v7.80.960(MR2) y ... • https://security.gallagher.com/cve-2019-19801 •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2019-12492
https://notcve.org/view.php?id=CVE-2019-12492
06 Jun 2019 — Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creation and information disclosure via the FT Command Centre Service and FT Controller Service services. Gallagher Command Center anterior de 7.80.939, 7.90.x anterior de 7.90.961, y 8.x anterior de las 8.00.1128 permite la creación de eventos arbitrarios y la revelación de información a través de los servicios FT Command Center Service y FT Controller Service. • https://security.gallagher.com/CVE-2019-12492 • CWE-863: Incorrect Authorization •