CVE-2020-7215

gallagher command centre

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-7215

Katalog CVE

CVSS 5.5 · Medium EPSS 0,30%

Kerentanan Insertion of Sensitive Information into Log File pada gallagher command centre. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party integrations such as DVR systems) were logged in the Command Centre event trail. Any authenticated operator with the 'view events' privilege could see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event.

Rincian

Terbit di NVD
20 Januari 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-532: Insertion of Sensitive Information into Log File
EPSS (30 hari)
0,30% peluang dieksploitasi; lebih tinggi dari 21,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
gallagher command centre Semua versi sebelum 7.80
gallagher command centre Versi 7.90 hingga sebelum 7.90.991
gallagher command centre Versi 8.00 hingga sebelum 8.00.1161
gallagher command centre Versi 8.10 hingga sebelum 8.10.1134
gallagher command centre Versi 7.90.991
gallagher command centre Versi 8.00.1161
gallagher command centre Versi 8.10.1134

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.