CVE-2024-21815

Published: Mar 5, 2024Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users. This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior.

Affected (5)

Products: Gallagher: Command Centre

Gallagher

1 product

Command Centre

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Gallagher Command Centre	Up to 8.60
Gallagher Command Centre	From 8.70 to 8.70.2526
Gallagher Command Centre	From 8.80 to 8.80.1526
Gallagher Command Centre	From 8.90 to 8.90.1751
Gallagher Command Centre	From 9.00 to 9.00.1774

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://security.gallagher.com/Security-Advisories/CVE-2024-21815

Source: disclosures@gallagher.com

Vendor Advisory

https://security.gallagher.com/Security-Advisories/CVE-2024-21815

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.