CVE-2023-25074

Published: Jul 25, 2023Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies. This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior.

Affected (6)

Products: Gallagher: Command Centre

Gallagher

1 product

Command Centre

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gallagher Command Centre	Up to 8.40.2216
Gallagher Command Centre	From 8.50 to 8.50.2831
Gallagher Command Centre	From 8.60 to 8.60.2347
Gallagher Command Centre	From 8.70 to 8.70.2185
Gallagher Command Centre	From 8.80 to 8.80.1192
Gallagher Command Centre	From 8.90 to 8.90.1318

Related CWEs

CWE-285

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-25074

Source: disclosures@gallagher.com

Vendor Advisory

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-25074

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.