CVE-2023-25074: Gallagher Command Centre

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies. This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior.

Affected products

• Gallagher Command Centre: up to and including 8.40.2216; from 8.50, before 8.50.2831 (fixed in 8.50.2831); from 8.60, before 8.60.2347 (fixed in 8.60.2347); from 8.70, before 8.70.2185 (fixed in 8.70.2185); from 8.80, before 8.80.1192 (fixed in 8.80.1192); from 8.90, before 8.90.1318 (fixed in 8.90.1318)

Published 2023-07-25. Last modified 2026-06-17.