CVE-2023-25074

MEDIUM 5.4CVE-2023-25074 · Published 25/07/2023 · updated 17/06/2026

In short

CVE-2023-25074 is a MEDIUM (CVSS 5.4) vulnerability affecting command centre (gallagher).
Chance of exploitation in the next 30 days (EPSS): 0.31%, higher than 24.3% of all vulnerabilities.
Fix: update to 8.50.2831, 8.60.2347, 8.70.2185, 8.80.1192 or later.

Package	Affected versions	Patched versions
command centre gallagher	`≥ 8.50, < 8.50.2831≥ 8.60, < 8.60.2347≥ 8.70, < 8.70.2185≥ 8.80, < 8.80.1192≥ 8.90, < 8.90.1318≤ 8.40.2216`	`8.50.28318.60.23478.70.21858.80.11928.90.1318`

Description

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies. This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior.

References

security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-25074 · Vendor Advisory

More vulnerabilities in command centre

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

command centre

gallagher

≥ 8.50, < 8.50.2831≥ 8.60, < 8.60.2347≥ 8.70, < 8.70.2185≥ 8.80, < 8.80.1192≥ 8.90, < 8.90.1318≤ 8.40.2216

8.50.28318.60.23478.70.21858.80.11928.90.1318

Description

More vulnerabilities in command centre

See all →