CVE-2024-42407

State: Published
Severity: 8.5 High
Published: Dec 12, 2024
Updated: Dec 12, 2024
Reserved: Aug 28, 2024

Description

Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access.

This issue affects: Command Centre Server 9.10 prior to 9.10.2149 (MR4), 9.00 prior to 9.00.2374 (MR5), 8.90 prior to 8.90.2356 (MR6), all versions of 8.80 and prior.

Scores

CVSS	Score	Vector	Source
3.1	8.5 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N	Gallagher

Weaknesses

CWE-532 Insertion of Sensitive Information into Log File

Affected Products

Product	Versions
Command Centre ServerGallagher	8.80 and earlierAffected 9.10 to before 9.10.2149 (MR4)Affected 9.00 to before 9.00.2374 (MR5)Affected 8.90 to before 8.90.2356 (MR6)Affected

References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-42407

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.