Auth bypass in Gallagher Command Centre

CVE-2020-16102

Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing the server to crash and fail to restart. This issue affects…

Vulnerability class: Broken Authentication

EPSS: 0.010 (77.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2020-16102?
CVE-2020-16102 is a high-severity vulnerability in Gallagher Command Centre, classified under Improper Authentication. CVSS score: 7.1/10. Published 2020-12-14.
How severe is CVE-2020-16102?
High severity. CVSS v3 base score is 7.1 out of 10.