CVE-2025-47147

Cleartext Storage of Sensitive Information CWE-312 in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile...

CVE-2025-47147

CVE-2025-47147 describes Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client for Android and iOS. The issue could allow an attacker with access to a logged-in operator’s mobile device to extract the session token and gain access for a limited duration. Affecte...

CVE-2025-47147: Cleartext Storage of Sensitive Information

Cleartext Storage of Sensitive Information CWE-312 in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile...

CVE-2021-23155

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions...

PT-2021-15395

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre Mobile Client for Android versions prior to 8.60.065 Gallagher Command Centre Mobile Client for Android version 8.50 and prior versions Description The issue is related to improper validation of the cloud certificate...

CVE-2021-23162: Improper Following of a Certificate's Chain of Trust

Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Connect for Android 15 versions prior to 15.04.040; version 14 and prior versions...

PT-2021-15396

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre Mobile Connect for Android versions prior to 15.04.040 Gallagher Command Centre Mobile Connect for Android version 14 and prior versions Description The issue is related to improper validation of the cloud certificate...

CVE-2021-23155: Improper Following of a Certificate's Chain of Trust

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions...