Default credentials

2019-08-2812:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.7%

JSON

An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade, if a custom service account is in use and the visitor management service is installed, the Windows username and password for this service are logged in cleartext to the Command_centre.log file.

CPENameOperatorVersion
command_centrege8.10
command_centrelt8.10.1092

CPE	Name	Operator	Version
	command_centre	ge	8.10
	command_centre	lt	8.10.1092

References

security.gallagher.com/CVE-2019-15294

security.gallagher.com/security-advisories