CVE-2026-25193

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-25193", "assignerOrgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "state": "PUBLISHED", "assignerShortName": "Gallagher", "dateReserved": "2026-03-01T23:45:09.705Z", "datePublished": "2026-05-25T05:28:14.766Z", "dateUpdated": "2026-05-26T14:24:08.348Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "shortName": "Gallagher", "dateUpdated": "2026-05-25T05:28:14.766Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-532", "description": "CWE-532 Insertion of sensitive information into log file", "type": "CWE"}]}], "affected": [{"vendor": "Gallagher", "product": "Command Centre Server", "versions": [{"status": "affected", "version": "9.40", "lessThan": "9.40.2575 (MR2)", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Gallagher", "product": "Active Directory Sync", "versions": [{"status": "affected", "version": "0", "lessThan": "9.10.05", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Cardholder Sync Utility", "versions": [{"status": "affected", "version": "0", "lessThan": "9.30.104", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Diagnostics Service", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.9", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Elevator Service", "versions": [{"status": "affected", "version": "0", "lessThan": "10.0.8", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Encoding Kiosk Application", "versions": [{"status": "affected", "version": "0", "lessThan": "9.60.10", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Entra ID Sync", "versions": [{"status": "affected", "version": "1.0", "lessThan": "1.0.10", "versionType": "custom"}, {"status": "affected", "version": "2.0", "lessThan": "2.0.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Gallagher", "product": "Event Sync Utility", "versions": [{"status": "affected", "version": "0", "lessThan": "8.70.62", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Event Logger", "versions": [{"status": "affected", "version": "0", "lessThan": "8.90.16", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Middleware Framework", "versions": [{"status": "affected", "version": "0", "lessThan": "8.90.34", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Nexudus Integration", "versions": [{"status": "affected", "version": "0", "lessThan": "9.60.21", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Okta Sync", "versions": [{"status": "affected", "version": "0", "lessThan": "9.40.05", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Papercut Interface Integration", "versions": [{"status": "affected", "version": "0", "lessThan": "9.60.02", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "SIP Integration", "versions": [{"status": "affected", "version": "0", "lessThan": "10.1.0", "versionType": "custom"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Insertion of Sensitive Information into Log File (CWE-532)&nbsp;in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f<br><b>Mitigating Factor:</b>&nbsp;Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.</p><div><b>Mitigation:&nbsp;</b>For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.</div>"}]}], "references": [{"url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.1, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H"}}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-26T14:24:00.870402Z", "id": "CVE-2026-25193", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-26T14:24:08.348Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-25193", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T14:24:00.870402Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-26T14:24:05.451Z"}}], "cna": {"source": {"discovery": "INTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Gallagher", "product": "Command Centre Server", "versions": [{"status": "affected", "version": "9.40", "lessThan": "9.40.2575 (MR2)", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Gallagher", "product": "Active Directory Sync", "versions": [{"status": "affected", "version": "0", "lessThan": "9.10.05", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Cardholder Sync Utility", "versions": [{"status": "affected", "version": "0", "lessThan": "9.30.104", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Diagnostics Service", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.9", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Elevator Service", "versions": [{"status": "affected", "version": "0", "lessThan": "10.0.8", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Encoding Kiosk Application", "versions": [{"status": "affected", "version": "0", "lessThan": "9.60.10", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Entra ID Sync", "versions": [{"status": "affected", "version": "1.0", "lessThan": "1.0.10", "versionType": "custom"}, {"status": "affected", "version": "2.0", "lessThan": "2.0.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Gallagher", "product": "Event Sync Utility", "versions": [{"status": "affected", "version": "0", "lessThan": "8.70.62", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Event Logger", "versions": [{"status": "affected", "version": "0", "lessThan": "8.90.16", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Middleware Framework", "versions": [{"status": "affected", "version": "0", "lessThan": "8.90.34", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Nexudus Integration", "versions": [{"status": "affected", "version": "0", "lessThan": "9.60.21", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Okta Sync", "versions": [{"status": "affected", "version": "0", "lessThan": "9.40.05", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Papercut Interface Integration", "versions": [{"status": "affected", "version": "0", "lessThan": "9.60.02", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "SIP Integration", "versions": [{"status": "affected", "version": "0", "lessThan": "10.1.0", "versionType": "custom"}], "defaultStatus": "affected"}], "references": [{"url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.", "supportingMedia": [{"type": "text/html", "value": "<p>Insertion of Sensitive Information into Log File (CWE-532)&nbsp;in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f<br><b>Mitigating Factor:</b>&nbsp;Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.</p><div><b>Mitigation:&nbsp;</b>For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.</div>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "CWE-532 Insertion of sensitive information into log file"}]}], "providerMetadata": {"orgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "shortName": "Gallagher", "dateUpdated": "2026-05-25T05:28:14.766Z"}}}, "cveMetadata": {"cveId": "CVE-2026-25193", "state": "PUBLISHED", "dateUpdated": "2026-05-26T14:24:08.348Z", "dateReserved": "2026-03-01T23:45:09.705Z", "assignerOrgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "datePublished": "2026-05-25T05:28:14.766Z", "assignerShortName": "Gallagher"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Command Centre Server", "vendor": "Gallagher", "versions": [{"lessThan": "9.40.2575 (MR2)", "status": "affected", "version": "9.40", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Active Directory Sync", "vendor": "Gallagher", "versions": [{"lessThan": "9.10.05", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Cardholder Sync Utility", "vendor": "Gallagher", "versions": [{"lessThan": "9.30.104", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Diagnostics Service", "vendor": "Gallagher", "versions": [{"lessThan": "2.0.9", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Elevator Service", "vendor": "Gallagher", "versions": [{"lessThan": "10.0.8", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Encoding Kiosk Application", "vendor": "Gallagher", "versions": [{"lessThan": "9.60.10", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Entra ID Sync", "vendor": "Gallagher", "versions": [{"lessThan": "1.0.10", "status": "affected", "version": "1.0", "versionType": "custom"}, {"lessThan": "2.0.5", "status": "affected", "version": "2.0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Event Sync Utility", "vendor": "Gallagher", "versions": [{"lessThan": "8.70.62", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Event Logger", "vendor": "Gallagher", "versions": [{"lessThan": "8.90.16", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Middleware Framework", "vendor": "Gallagher", "versions": [{"lessThan": "8.90.34", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Nexudus Integration", "vendor": "Gallagher", "versions": [{"lessThan": "9.60.21", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Okta Sync", "vendor": "Gallagher", "versions": [{"lessThan": "9.40.05", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "Papercut Interface Integration", "vendor": "Gallagher", "versions": [{"lessThan": "9.60.02", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "product": "SIP Integration", "vendor": "Gallagher", "versions": [{"lessThan": "10.1.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "disclosures@gallagher.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gallagher:active_directory_sync:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "86C6567A-2A09-4BB9-8CB8-F805FB90C1B8", "versionEndExcluding": "9.10.05", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:cardholder_sync_utility:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "A6D149C7-99B1-4AE7-8A55-C9E580B90C36", "versionEndExcluding": "9.30.104", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "matchCriteriaId": "2D465376-3887-4E00-A818-2B16D04C0A57", "versionEndExcluding": "9.40.2575", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:diagnostics_service:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "72E4DF3E-D733-471A-AAA6-FFA8D45D7E14", "versionEndExcluding": "2.0.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:elevator_service:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "0F2740A2-A1F8-4196-AFAF-57C06953FBDF", "versionEndExcluding": "10.0.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:encoding_kiosk_application:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "4D778901-4327-47EA-ACF6-ADDEFF118A20", "versionEndExcluding": "9.60.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:entra_id_sync_v1:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "146602EB-32A2-4C49-8D56-1E92F9408F77", "versionEndExcluding": "1.0.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:entra_id_sync_v2:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "8173A618-EBE2-4B67-AFC3-B899D895BBE4", "versionEndExcluding": "2.0.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:event_logger:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "BE2CC85C-1091-4CCB-A446-F3181E52739C", "versionEndExcluding": "8.90.16", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:event_sync_utility:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "623E81B3-AE73-4322-91E1-7DD7787A785F", "versionEndExcluding": "8.70.62", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:middleware_framework:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "F8D655FD-6395-47B8-9D42-7FCA2CC87CD4", "versionEndExcluding": "8.90.34", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:nexudus_integration:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "CA4AB723-E187-4CB2-8623-5DB3980DF815", "versionEndExcluding": "9.60.21", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:okta_sync:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "BB2734E6-EC24-432A-AC0E-1B52081977D9", "versionEndExcluding": "9.40.05", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:papercut_interface_integration:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "3CBA27C1-F4DB-4032-A5D6-8DC317399E17", "versionEndExcluding": "9.60.02", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:sip_integration:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "6E28597D-298E-4935-91EB-9D30124EC64E", "versionEndExcluding": "10.10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre."}, {"lang": "es", "value": "La inserci\u00f3n de informaci\u00f3n sensible en el archivo de registro (CWE-532) en algunos instaladores del Servicio Command Centre podr\u00eda llevar a la exposici\u00f3n de las credenciales de la cuenta de servicio.\nFactor de mitigaci\u00f3n: Solo los sitios que instalan los Servicios Command Centre con una cuenta de servicio personalizada (no la cuenta de servicio de red predeterminada) se ven potencialmente afectados.\n\nMitigaci\u00f3n: Para los sitios preocupados por la exposici\u00f3n, la acci\u00f3n recomendada es cambiar la contrase\u00f1a de la cuenta de servicio. Tambi\u00e9n pueden eliminar cualquier archivo de registro del instalador, que suelen encontrarse en %programdata%\\Gallagher\\Command Centre."}], "id": "CVE-2026-25193", "lastModified": "2026-08-17T18:21:14.433", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "disclosures@gallagher.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25193", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-26T14:24:00.870402Z", "version": "2.0.3"}}]}, "published": "2026-05-25T07:16:14.263", "references": [{"source": "disclosures@gallagher.com", "tags": ["Vendor Advisory"], "url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"}], "sourceIdentifier": "disclosures@gallagher.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "disclosures@gallagher.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,9.10.05)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Active Directory Sync", "source": "cna", "vendor": "Gallagher"}, "product": "active_directory_sync", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,9.30.104)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Cardholder Sync Utility", "source": "cna", "vendor": "Gallagher"}, "product": "cardholder_sync_utility", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.40,9.40.2575 (MR2))"}}], "enrichment": {"confidence": 87.0, "confidence_source": "matching", "scores": [{"score": 87.0, "source": "matching"}]}, "original": {"product": "Command Centre Server", "source": "cna", "vendor": "Gallagher"}, "product": "command_centre", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.0.9)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Diagnostics Service", "source": "cna", "vendor": "Gallagher"}, "product": "diagnostics_service", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,10.0.8)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Elevator Service", "source": "cna", "vendor": "Gallagher"}, "product": "elevator_service", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,9.60.10)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Encoding Kiosk Application", "source": "cna", "vendor": "Gallagher"}, "product": "encoding_kiosk_application", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[1.0,1.0.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[2.0,2.0.5)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Entra ID Sync", "source": "cna", "vendor": "Gallagher"}, "product": "entra_id_sync", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,8.90.16)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Event Logger", "source": "cna", "vendor": "Gallagher"}, "product": "event_logger", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,8.70.62)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Event Sync Utility", "source": "cna", "vendor": "Gallagher"}, "product": "event_sync_utility", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,8.90.34)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Middleware Framework", "source": "cna", "vendor": "Gallagher"}, "product": "middleware_framework", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,9.60.21)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Nexudus Integration", "source": "cna", "vendor": "Gallagher"}, "product": "nexudus_integration", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,9.40.05)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Okta Sync", "source": "cna", "vendor": "Gallagher"}, "product": "okta_sync", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,9.60.02)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Papercut Interface Integration", "source": "cna", "vendor": "Gallagher"}, "product": "papercut_interface_integration", "vendor": "gallagher"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,10.1.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "SIP Integration", "source": "cna", "vendor": "Gallagher"}, "product": "sip_integration", "vendor": "gallagher"}], "created": "2026-05-25T07:30:19.899042+00:00", "title": "Sensitive Information Disclosure via Installer Log Files in Gallagher Command Centre Services", "updated": "2026-05-25T11:33:02.732689+00:00", "vendors": ["gallagher", "gallagher$PRODUCT$active_directory_sync", "gallagher$PRODUCT$cardholder_sync_utility", "gallagher$PRODUCT$command_centre", "gallagher$PRODUCT$diagnostics_service", "gallagher$PRODUCT$elevator_service", "gallagher$PRODUCT$encoding_kiosk_application", "gallagher$PRODUCT$entra_id_sync", "gallagher$PRODUCT$event_logger", "gallagher$PRODUCT$event_sync_utility", "gallagher$PRODUCT$middleware_framework", "gallagher$PRODUCT$nexudus_integration", "gallagher$PRODUCT$okta_sync", "gallagher$PRODUCT$papercut_interface_integration", "gallagher$PRODUCT$sip_integration"]}