CVE-2023-23568
First published: Tue Jul 25 2023(Updated: )
Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This issue affects Command Centre: vEL 8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior
Credit: disclosures@gallagher.com disclosures@gallagher.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gallagher Command Centre | <=8.40.2216 | |
| Gallagher Command Centre | >=8.50<8.50.2831 | |
| Gallagher Command Centre | >=8.60<8.60.2347 | |
| Gallagher Command Centre | >=8.70<8.70.2185 | |
| Gallagher Command Centre | >=8.80<8.80.1192 | |
| Gallagher Command Centre | >=8.90<8.90.1318 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-23568?
CVE-2023-23568 is a vulnerability in Command Centre Server that allows authenticated unprivileged operators to modify and view Personal Data Fields.
Which versions of Command Centre are affected by CVE-2023-23568?
The following versions of Command Centre are affected: vEL8.40.2216, vEL8.50 (up to vEL8.50.2831), vEL8.60 (up to vEL8.60.2347), vEL8.70 (up to vEL8.70.2185), vEL8.80 (up to vEL8.80.1192), vEL8.90 (up to vEL8.90.1318).
What is the severity of CVE-2023-23568?
The severity of CVE-2023-23568 is medium, with a CVSS score of 5.4.
How can I fix CVE-2023-23568?
To fix CVE-2023-23568, update Command Centre to the latest version available, which contains the necessary security patches.
Where can I find more information about CVE-2023-23568?
You can find more information about CVE-2023-23568 on the Gallagher Security Advisories website: [https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-23568](https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-23568).
- collector/nvd-latest
- collector/nvd-index
- agent/weakness
- agent/author
- agent/type
- agent/softwarecombine
- collector/nvd-api
- agent/software-canonical-lookup-request
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- agent/event
- agent/source
- vendor/gallagher
- canonical/gallagher command centre
- version/gallagher command centre/8.40.2216
- version/gallagher command centre/8.50
- version/gallagher command centre/8.60
- version/gallagher command centre/8.70
- version/gallagher command centre/8.80
- version/gallagher command centre/8.90