Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2024-42407

Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sen

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Gallagher

Description

Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access. This issue affects: Command Centre Server 9.10 prior to 9.10.2149 (MR4), 9.00 prior to 9.00.2374 (MR5), 8.90 prior to 8.90.2356 (MR6), all versions of 8.80 and prior.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gallagher Command Centre Server

Default version status: affected

  • 0 to ≤ 8.80affected
  • 9.10 to < 9.10.2149 (MR4)affected
  • 9.00 to < 9.00.2374 (MR5)affected
  • 8.90 to < 8.90.2356 (MR6)affected

References