CVE-2023-23584
Severity Score
4.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of items that would not otherwise be viewable.
This issue affects: Gallagher Command Centre 8.70 prior to vEL8.70.1787 (MR2), 8.60 prior to vEL8.60.2039 (MR4), all version of 8.50 and prior.
Una discrepancia de respuesta observable en la API REST de Gallagher Command Centre permite a un usuario sin privilegios suficientes inferir la presencia de elementos que de otro modo no serían visibles. Este problema afecta: Gallagher Command Center 8.70 anterior a vEL8.70.1787 (MR2), 8.60 anterior a vEL8.60.2039 (MR4), todas las versiones de 8.50 y anteriores.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-02-03 CVE Reserved
- 2023-12-18 CVE Published
- 2024-08-02 CVE Updated
- 2024-11-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-203: Observable Discrepancy
- CWE-204: Observable Response Discrepancy
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://security.gallagher.com/Security-Advisories/CVE-2023-23584 | 2024-01-05 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | <= 8.50 Search vendor "Gallagher" for product "Command Centre" and version " <= 8.50" | - |
Affected
| ||||||
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.60 < 8.60.2039 Search vendor "Gallagher" for product "Command Centre" and version " >= 8.60 < 8.60.2039" | - |
Affected
| ||||||
| Gallagher Search vendor "Gallagher" | Command Centre Search vendor "Gallagher" for product "Command Centre" | >= 8.70 < 8.70.1787 Search vendor "Gallagher" for product "Command Centre" and version " >= 8.70 < 8.70.1787" | - |
Affected
| ||||||