CVE-2023-23576CWE-696

Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network…

Medium · published December 18, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision.

This issue affects: Gallagher Command Centre: 8.90 prior to vEL8.90.1620 (MR2), 8.80 prior to vEL8.80.1369 (MR3), 8.70 prior to vEL8.70.2375 (MR5), 8.60 prior to vEL8.60.2550 (MR7), all versions of 8.50 and prior.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.5th percentile
Weakness
CWE-696 · Incorrect Behavior Order
Published
2023-12-18T21:59Z
EPSS history
Timeline
  • 18 DEC 21:59Z
    Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network…
    cvelistv5