CVE-2024-42407

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-42407
Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access. This issue affects: Command Centre Server 9.10 prior to 9.10.2149 (MR4), 9.00 prior to 9.00.2374 (MR5), 8.90 prior to 8.90.2356 (MR6), all versions of 8.80 and prior.

8.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.1 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2024-42407
Configurations

No configuration.

History

15 Apr 2026, 00:35

Type Values Removed Values Added
Summary
  • (es) La inserción de información confidencial en el archivo de registro (CWE-532) en la función Transmitter de Gallagher Command Centre Alarm podría permitir que un operador autenticado vea cierta información confidencial de seguridad a la que no se le ha otorgado acceso. Este problema afecta a: Command Centre Server 9.10 anterior a 9.10.2149 (MR4), 9.00 anterior a 9.00.2374 (MR5), 8.90 anterior a 8.90.2356 (MR6), todas las versiones de 8.80 y anteriores.

12 Dec 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-12 02:15

Updated : 2026-04-15 00:35

NVD link : CVE-2024-42407

Mitre link : CVE-2024-42407

CVE.ORG link : CVE-2024-42407

JSON object : View

Products Affected

No product.

CWE
CWE-532

Insertion of Sensitive Information into Log File