CVE-2023-23584

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Dec 18, 2023
Updated: Jan 5, 2024
CWE ID 203
CWE ID 204

Summary

CVE-2023-23584 is a vulnerability affecting the Gallagher Command Centre RESTAPI. It allows insufficiently-privileged users to infer the presence of items that should not be viewable, based on observable response discrepancies. This issue puts version 8.70 of Gallagher Command Centre before vEL8.70.1787 (MR2), 8.60 before vEL8.60.2039 (MR4), and all versions of 8.50 and older at risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Gallagher Command Centre

Affected Vendors

  • Gallagher

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-23584 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions