CVE-2021-23140: Gallagher Command Centre, заобикаляне на вход и права

Описание

Оригинално описание

Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command Centre Operator. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); version 8.10 and prior versions.

Засегнати продукти

• Gallagher Command Centre: unspecified до 8.10; 8.40 преди 8.40.1888 (MR3); 8.30 преди 8.30.1359 (MR3); 8.20 преди 8.20.1259 (MR5)

Вид слабост

• CWE-285 Неправилна авторизация

История

Други уязвимости в Gallagher Command Centre

• 3.3CVE-2024-23194
• 5.4CVE-2023-23570
• 4.3CVE-2023-23568
• 6.5CVE-2023-22363
• 7.1CVE-2023-25074

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-23140
• https://nvd.nist.gov/vuln/detail/CVE-2021-23140
• https://security.gallagher.com/Security-Advisories/CVE-2021-23140