VulnerabilityModified
CVE-2019-12492
Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creation and information disclosure via the FT Command Centre Service and FT Controller Service services.
MEDIUM 6.5EPSS 0.74%
Does this matter?
Lower severity and a low EPSS score (0.74%). Track it; it rarely justifies an emergency change on its own.
Description
Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creation and information disclosure via the FT Command Centre Service and FT Controller Service services.
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
- EPSS
- 0.74% probability · 53th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-863
- Affected
- gallagher/command centre
- Source
- cve@mitre.org
References
- https://security.gallagher.com/CVE-2019-12492Mitigation, Vendor Advisory
- https://security.gallagher.com/security-advisoriesVendor Advisory
- https://security.gallagher.com/CVE-2019-12492Mitigation, Vendor Advisory
- https://security.gallagher.com/security-advisoriesVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.