What is CVE-2020-7215?

CVE-2020-7215 is a medium-severity vulnerability in Gallagher Command Centre, classified under Insertion of Sensitive Information into Log File. CVSS score: 5.5/10. Published 2020-01-20.

How severe is CVE-2020-7215?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Information disclosure in Gallagher Command Centre

CVE-2020-7215

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party integrations such as DVR systems) were logged in the Command Centre event trail. Any authenticated operator with the 'view events' privilege could see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event.

EPSS: 0.003 (22.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Gallagher Command_centre — versions 7.90.991, 8.00.1161, 8.10.1134
N/a — versions n/a

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-7215?: CVE-2020-7215 is a medium-severity vulnerability in Gallagher Command Centre, classified under Insertion of Sensitive Information into Log File. CVSS score: 5.5/10. Published 2020-01-20.
How severe is CVE-2020-7215?: Medium severity. CVSS v3 base score is 5.5 out of 10.