CVEvulnerability

CVE-2020-16102

8.2 HIGH Published 2020-12-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-287, CWE-306

Description

Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing the server to crash and fail to restart. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1299(MR2); 8.20 versions prior to 8.20.1218(MR4); 8.10 versions prior to 8.10.1253(MR6); 8.00 versions prior to 8.00.1252(MR7); version 7.90 and prior versions.

Affected configurations

• gallagher command centre (< 7.90.0) • gallagher command centre (>= 8.00 < 8.00.1252) • gallagher command centre (>= 8.10 < 8.10.1253) • gallagher command centre (>= 8.20 < 8.20.1218) • gallagher command centre (>= 8.30 < 8.30.1299) • gallagher command centre 8.00.1252 • gallagher command centre 8.10.1253 • gallagher command centre 8.20.1218 • gallagher command centre 8.30.1299

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness

References