Lucene search

GallagherCVELIST:CVE-2023-23568

HistoryJul 25, 2023 - 1:31 a.m.

CVE-2023-23568

2023-07-2501:31:59

CWE-285

Gallagher

www.cve.org

command centre server

privilege validation

personal data fields

unprivileged operators

security vulnerability

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields.

This issue affects Command Centre: vEL

8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2),

vEL8.70 prior to

vEL8.70.2185 (MR4),

vEL8.60 prior to

vEL8.60.2347 (MR6),

vEL8.50 prior to

vEL8.50.2831 (MR8), all versions

vEL8.40 and prior

CNA Affected

[
  {
    "vendor": "Gallagher",
    "product": "Command Centre",
    "versions": [
      {
        "status": "affected",
        "version": "vEL8.90",
        "lessThan": "1318",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "vEL8.80",
        "lessThan": "1192",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "vEL8.70",
        "lessThan": "2185",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "vEL8.60",
        "lessThan": "2347",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "vEL8.50",
        "lessThan": "2831",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "vEL8.40"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-23568

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

Related for CVELIST:CVE-2023-23568