Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.
Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.
Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Command Centre Server
Vendor
Gallagher
Product
Command Centre Server
Platforms
Unknown
Default status
unaffected
Command Centre Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
9.40
affected
custom
9.40.2575 (MR2)
Unavailable
None listed
Active Directory Sync
Vendor
Gallagher
Product
Active Directory Sync
Platforms
Unknown
Default status
affected
Active Directory Sync · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
9.10.05
Unavailable
None listed
Cardholder Sync Utility
Vendor
Gallagher
Product
Cardholder Sync Utility
Platforms
Unknown
Default status
affected
Cardholder Sync Utility · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
9.30.104
Unavailable
None listed
Diagnostics Service
Vendor
Gallagher
Product
Diagnostics Service
Platforms
Unknown
Default status
affected
Diagnostics Service · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
2.0.9
Unavailable
None listed
Elevator Service
Vendor
Gallagher
Product
Elevator Service
Platforms
Unknown
Default status
affected
Elevator Service · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
10.0.8
Unavailable
None listed
Encoding Kiosk Application
Vendor
Gallagher
Product
Encoding Kiosk Application
Platforms
Unknown
Default status
affected
Encoding Kiosk Application · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
9.60.10
Unavailable
None listed
Entra ID Sync
Vendor
Gallagher
Product
Entra ID Sync
Platforms
Unknown
Default status
unaffected
Entra ID Sync · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
1.0.10
Unavailable
None listed
2.0
affected
custom
2.0.5
Unavailable
None listed
Event Sync Utility
Vendor
Gallagher
Product
Event Sync Utility
Platforms
Unknown
Default status
affected
Event Sync Utility · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
8.70.62
Unavailable
None listed
Event Logger
Vendor
Gallagher
Product
Event Logger
Platforms
Unknown
Default status
affected
Event Logger · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
8.90.16
Unavailable
None listed
Middleware Framework
Vendor
Gallagher
Product
Middleware Framework
Platforms
Unknown
Default status
affected
Middleware Framework · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
8.90.34
Unavailable
None listed
Nexudus Integration
Vendor
Gallagher
Product
Nexudus Integration
Platforms
Unknown
Default status
affected
Nexudus Integration · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
9.60.21
Unavailable
None listed
Okta Sync
Vendor
Gallagher
Product
Okta Sync
Platforms
Unknown
Default status
affected
Okta Sync · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
9.40.05
Unavailable
None listed
Papercut Interface Integration
Vendor
Gallagher
Product
Papercut Interface Integration
Platforms
Unknown
Default status
affected
Papercut Interface Integration · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
9.60.02
Unavailable
None listed
SIP Integration
Vendor
Gallagher
Product
SIP Integration
Platforms
Unknown
Default status
affected
SIP Integration · Scoped product and version facts