CVE-2024-21815
CVSS V2 None
CVSS V3 None
Description
Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users.
This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), all version of 8.60 and prior.
Overview
- CVE ID
- CVE-2024-21815
- Assigner
- Gallagher
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-03-05T03:09:52.505Z
- Last Modified Date
- 2024-06-04T17:38:15.343Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://security.gallagher.com/Security-Advisories/CVE-2024-21815 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-21815 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21815 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-26 15:08:21 | Added to TrackCVE |