Vulnerabilities > Gallagher > Command Centre > 8.10.1134

DATE CVE VULNERABILITY TITLE RISK
2020-01-17 CVE-2019-19802 Information Exposure vulnerability in Gallagher Command Centre
In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without privilege checks being applied.
network
low complexity
gallagher CWE-200
4.0
2020-01-17 CVE-2019-19801 Unspecified vulnerability in Gallagher Command Centre
In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases.
local
low complexity
gallagher
2.1