CVE-2019-19801

Published: Jan 17, 2020Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases.

Affected (9)

Products: Gallagher: Command Centre

Gallagher

1 product

Command Centre

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Gallagher Command Centre	Before 7.70
Gallagher Command Centre	From 7.80 to 7.80.960
Gallagher Command Centre	From 7.90 to 7.90.991
Gallagher Command Centre	From 8.00 to 8.00.1161
Gallagher Command Centre	From 8.10 to 8.10.1134
Gallagher Command Centre	Version 7.80.960
Gallagher Command Centre	Version 7.90.991
Gallagher Command Centre	Version 8.00.1161
Gallagher Command Centre	Version 8.10.1134

References (2)

https://security.gallagher.com/cve-2019-19801

Source: cve@mitre.org

Vendor Advisory

https://security.gallagher.com/cve-2019-19801

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.