CVE-2020-16096 Information

Description

In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4) 8.00 prior to 8.00.1161(MR5) 7.90 prior to 7.90.991(MR5) 7.80 prior to 7.80.960(MR2) 7.70 and earlier any operator account has access to all data that would be replicated if the system were to be (or is) attached to a multi-server environment. This can include plain text credentials for DVR systems and card details used for physical access/alarm/perimeter components.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Reference

https://security.gallagher.com/Security-Advisories/CVE-2020-16096

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

CHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

7.7