Vulnerability Description
An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade, if a custom service account is in use and the visitor management service is installed, the Windows username and password for this service are logged in cleartext to the Command_centre.log file.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gallagher | Command Centre | >= 8.10, < 8.10.1092 |
Related Weaknesses (CWE)
References
- https://security.gallagher.com/CVE-2019-15294Vendor Advisory
- https://security.gallagher.com/security-advisoriesVendor Advisory
- https://security.gallagher.com/CVE-2019-15294Vendor Advisory
- https://security.gallagher.com/security-advisoriesVendor Advisory
FAQ
What is CVE-2019-15294?
CVE-2019-15294 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade, if a custom service account is in use and the visitor management service is installed, the Windows user...
How severe is CVE-2019-15294?
CVE-2019-15294 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-15294?
Check the references section above for vendor advisories and patch information. Affected products include: Gallagher Command Centre.