Vulnerabilidades do Gallagher Command Centre
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Gallagher Command Centre: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:gallagher:command_centre
CVE-2026-25193
Alta · 8.6
CWE-532 25/05/2026
Insertion of Sensitive Information into Log File em Gallagher Active Directory Sync
Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.
Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.
Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
CVE-2026-20757
Baixa · 2.5
CWE-667 03/03/2026
Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a…
Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server.
This issue affects Command Centre Server:
9.40 prior to vEL9.40.1976(MR1), 9.30 prior to vEL9.30.3382 (MR4), 9.20 prior to vEL9.20.3783 (MR6), 9.10 prior to vEL9.10.4647 (MR9), all versions of 9.00 and prior.