CVE-2024-21815
First published: Tue Mar 05 2024(Updated: )
Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users. This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior.
Credit: disclosures@gallagher.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gallagher Command Centre | <vEL9.00.1774 | |
| Gallagher Command Centre | <vEL8.90.1751 | |
| Gallagher Command Centre | <vEL8.80.1526 | |
| Gallagher Command Centre | <vEL8.70.2526 | |
| Gallagher Command Centre | <8.60 | |
| Gallagher Command Centre | < | |
| Gallagher Command Centre | <=8.60 | |
| Gallagher Command Centre | >=8.70<8.70.2526 | |
| Gallagher Command Centre | >=8.80<8.80.1526 | |
| Gallagher Command Centre | >=8.90<8.90.1751 | |
| Gallagher Command Centre | >=9.00<9.00.1774 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-21815?
CVE-2024-21815 is classified as a medium severity vulnerability due to insufficient protection of credentials.
How do I fix CVE-2024-21815?
To fix CVE-2024-21815, upgrade your Gallagher Command Centre to version vEL9.00.1774 or higher.
Who is affected by CVE-2024-21815?
CVE-2024-21815 affects users of Gallagher Command Centre versions prior to vEL9.00.1774, vEL8.90.1751, and vEL8.80.1526.
What types of vulnerabilities does CVE-2024-21815 involve?
CVE-2024-21815 involves insufficiently protected credentials, leading to access by unauthenticated users.
Can CVE-2024-21815 be exploited remotely?
Yes, CVE-2024-21815 can potentially be exploited remotely by authenticated but unprivileged users.
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/severity
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/gallagher
- canonical/gallagher command centre
- version/gallagher command centre/8.60
- version/gallagher command centre/8.70
- version/gallagher command centre/8.80
- version/gallagher command centre/8.90
- version/gallagher command centre/9.00