Gallagher: >> Command Centre Security Vulnerabilities
An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade, if a custom service account is in use and the visitor management service is installed, the Windows username and password for this service are logged in cleartext to the Command_centre.log file.
CVSS Score
9.8
EPSS Score
0.012
Published
2019-08-28
Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creation and information disclosure via the FT Command Centre Service and FT Controller Service services.
CVSS Score
6.5
EPSS Score
0.007
Published
2019-06-06
Page 5