CVE-2024-42407

Description

Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access. This issue affects: Command Centre Server 9.10 prior to 9.10.2149 (MR4), 9.00 prior to 9.00.2374 (MR5), 8.90 prior to 8.90.2356 (MR6), all versions of 8.80 and prior.

Reserved 2024-08-28 | Published 2024-12-12 | Updated 2024-12-12 | Assigner Gallagher

Problem types

CWE-532 Insertion of Sensitive Information into Log File

Product status

Default status
affected

Any version
affected

9.10 before 9.10.2149 (MR4)
affected

9.00 before 9.00.2374 (MR5)
affected

8.90 before 8.90.2356 (MR6)
affected

References

security.gallagher.com/...Security-Advisories/CVE-2024-42407

cve.org (CVE-2024-42407)

nvd.nist.gov (CVE-2024-42407)

Download JSON