What is CVE-2023-23568?

CVE-2023-23568 is a medium-severity vulnerability in Gallagher Command Centre, classified under Improper Authorization. CVSS score: 4.3/10. Published 2023-07-25.

How severe is CVE-2023-23568?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Auth bypass in Gallagher Command Centre

CVE-2023-23568

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This issue affects Command Centre: vEL 8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior

EPSS: 0.003 (23.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Gallagher Command Centre — versions vEL8.90, vEL8.80, vEL8.70
Gallagher Command_centre

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

disclosures@gallagher.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-23568?: CVE-2023-23568 is a medium-severity vulnerability in Gallagher Command Centre, classified under Improper Authorization. CVSS score: 4.3/10. Published 2023-07-25.
How severe is CVE-2023-23568?: Medium severity. CVSS v3 base score is 4.3 out of 10.