Vulnerability · Published Dec 18, 2023 · Assigned by Gallagher
CVE-2023-23576
Medium 4.3
In plain English
A medium-severity security flaw in Command Centre Server from Gallagher. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Official description
Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision. This issue affects: Gallagher Command Centre: 8.90 prior to vEL8.90.1620 (MR2), 8.80 prior to vEL8.80.1369 (MR3), 8.70 prior to vEL8.70.2375 (MR5), 8.60 prior to vEL8.60.2550 (MR7), all versions of 8.50 and prior.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Gallagher | Command Centre Server | 0 – through 8.508.90 – before 8.90.1620 (MR2)8.80 – before 8.80.1369 (MR3)8.70 – before 8.70.2375 (MR5)8.60 – before 8.60.2550 (MR7) |
Weakness: CWE-696 · Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N