description: Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing the server to crash and fail to restart. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1299(MR2); 8.20 versions prior to 8.20.1218(MR4); 8.10 versions prior to 8.10.1253(MR6); 8.00 versions prior to 8.00.1252(MR7); version 7.90 and prior versions.
problem types: CWE-287 Improper Authentication
affected:
{
product: Command Centre
vendor: Gallagher
versions:
lessThanOrEqual: 7.90, status: affected, version: unspecified, versionType: custom
lessThan: 8.30.1299(MR2), status: affected, version: 8.30, versionType: custom
lessThan: 8.20.1218(MR4), status: affected, version: 8.20, versionType: custom
lessThan: 8.10.1253(MR6), status: affected, version: 8.10, versionType: custom
lessThan: 8.00.1252(MR7), status: affected, version: 8.00, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
version: 3.1
]