Critical · published September 15, 2020
🚨 Any operator account can access sensitive data like plain text credentials and card details in Gallagher Command Centre — it's like giving all your staff the master key to your safe! 🔥 Think of it as a restaurant staff with access to the kitchen and pantry without any supervision. Every employee, regardless of role, could easily grab a secret ingredient or two without anyone knowing! This means that a malicious insider or an accidental slip could lead to catastrophic data leaks, exposing critical information that could compromise physical security systems. Imagine the chaos if credentials for your security cameras or access cards were in the wrong hands — a security nightmare waiting to happen!
Think of it as a restaurant staff with access to the kitchen and pantry without any supervision. Every employee, regardless of role, could easily grab a secret ingredient or two without anyone knowing! The vulnerability allows any operator account access to sensitive replicated data in multi-server setups, including plain text credentials and payment details. This misconfiguration exposes critical information that should be tightly controlled.
This means that a malicious insider or an accidental slip could lead to catastrophic data leaks, exposing critical information that could compromise physical security systems. Imagine the chaos if credentials for your security cameras or access cards were in the wrong hands — a security nightmare waiting to happen! To remedy this, upgrade to Gallagher Command Centre version 8.10.1134 (MR4), 8.00.1161 (MR5), 7.90.991 (MR5), 7.80.960 (MR2), or any version higher than 7.70. Additionally, tighten user access controls to ensure that only authorized personnel can view sensitive data. You've got this! Follow these steps and you'll fortify your defenses in no time! 🛡️