CVE-2021-23136CWE-285

Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command Centre Operator

Medium · published June 11, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command Centre Operator. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); version 8.10 and prior versions.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00583 · 47.1th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-06-11T15:46Z
EPSS history
Timeline
  • 11 JUN 15:46Z
    Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command Centre Operator
    cvelistv5