Information disclosure

2019-06-0620:29:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

JSON

Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creation and information disclosure via the FT Command Centre Service and FT Controller Service services.

CPENameOperatorVersion
command_centrege8.0
command_centrelt8.00.1128
command_centrege7.90.0
command_centrelt7.90.961
command_centrelt7.80.939

Name	Operator	Version
command_centre	ge	8.0
command_centre	lt	8.00.1128
command_centre	ge	7.90.0
command_centre	lt	7.90.961
command_centre	lt	7.80.939

References

security.gallagher.com/CVE-2019-12492

security.gallagher.com/security-advisories