VULNERABILITY INTELLIGENCE
CVE-2024-23194
CVSS score3.3 LOW
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-07-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint could allow an attacker limited ability to modify Command Centre log files. This issue affects: Gallagher Command Centre v9.10 prior to vEL9.10.1268 (MR1).
Weakness classification
- disclosures@gallagher.com: CWE-117