CVE-2023-23570

Severity: Medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Components affected: Command Centre Server

Version of Command Centre affected: 8.90 prior to vEL8.90.1620 (MR2), all versions of 8.80 and prior.

Reported by: Gallagher Internal

Active exploitation of vulnerability: No

Description of vulnerability: Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undefined behaviour. 

This issue affects: Gallagher Command Centre 8.90 prior to vEL8.90.1620 (MR2), all versions of 8.80 and prior.

Mitigation: None

Maintenance releases are now available for:

• v8.90 – v8.90.1620 (MR2)

Important notes:

*This indicates whether Gallagher are aware of this being actively exploited against customer sites at the time of publication.