PT-2023-19049 · Gallagher · Gallagher Command Centre

CVE-2023-23570 · Publicado 2023-12-18 · Atualizado 2024-01-05

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre versions 8.80 and prior Gallagher Command Centre versions 8.90 prior to vEL8.90.1620 (MR2)

Description The Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed, leading to invalid configuration with undefined behavior.

Recommendations For Gallagher Command Centre versions 8.80 and prior, update to version 8.90 or later and then apply the update to vEL8.90.1620 (MR2) or later. For Gallagher Command Centre versions 8.90 prior to vEL8.90.1620 (MR2), update to vEL8.90.1620 (MR2) or later.

Correção

Enumeração de Fraquezas

CWE-602

Identificadores relacionados

CVE-2023-23570

Produtos afetados

Gallagher Command Centre

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-23570 · Nota de Segurança
• https://t.me/cvenotify/64127 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-23570 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1736872685039411337 · Publicação no Twitter
• https://t.me/cvenotify/64031 · Publicação no Telegram
• https://security.gallagher.com/Security-Advisories/CVE-2023-23570 · Aviso do Fabricante
• https://t.me/cvenotify/66452 · Publicação no Telegram