CVE-2023-23576

Published: Dec 18, 2023Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 0.7 / Impact: 3.6

Source: NVD

Description

Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision. This issue affects: Gallagher Command Centre: 8.90 prior to vEL8.90.1620 (MR2), 8.80 prior to vEL8.80.1369 (MR3), 8.70 prior to vEL8.70.2375 (MR5), 8.60 prior to vEL8.60.2550 (MR7), all versions of 8.50 and prior.

Affected (5)

Products: Gallagher: Command Centre

Gallagher

1 product

Command Centre

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Gallagher Command Centre	Up to 8.50
Gallagher Command Centre	From 8.60 to 8.60.2550
Gallagher Command Centre	From 8.70 to 8.70.2375
Gallagher Command Centre	From 8.80 to 8.80.1369
Gallagher Command Centre	From 8.90 to 8.90.1620

Related CWEs

CWE-696

Incorrect Behavior Order

The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways which may produce resultant weaknesses.

References (2)

https://security.gallagher.com/Security-Advisories/CVE-2023-23576

Source: disclosures@gallagher.com

Vendor Advisory

https://security.gallagher.com/Security-Advisories/CVE-2023-23576

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.