CVE-2020-16096 Explained : Impact and Mitigation

Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70 and earlier are affected by a critical vulnerability allowing unauthorized access to sensitive data.

Understanding CVE-2020-16096

This CVE identifies a security flaw in Gallagher Command Centre that could lead to unauthorized access to critical information.

What is CVE-2020-16096?

In Gallagher Command Centre versions 8.10 and earlier, any operator account can access data that would be replicated in a multi-server environment, potentially exposing sensitive credentials.

The Impact of CVE-2020-16096

The vulnerability has a CVSS base score of 9.9, indicating a critical severity level with high impacts on confidentiality, integrity, and availability of the system.

Technical Details of CVE-2020-16096

Gallagher Command Centre vulnerability details.

Vulnerability Description

The flaw allows any operator account to access replicated data in a multi-server setup, potentially exposing sensitive information like plain text credentials and card details.

Affected Systems and Versions

Command Centre versions 8.10 to 8.10.1134(MR4)
Command Centre versions 8.00 to 8.00.1161(MR5)
Command Centre versions 7.90 to 7.90.991(MR5)
Command Centre versions 7.80 to 7.80.960(MR2)
Command Centre versions 7.70 and earlier

Exploitation Mechanism

Unauthorized operators can exploit the vulnerability to gain access to sensitive data, compromising system security.

Mitigation and Prevention

Protect your system from CVE-2020-16096.

Immediate Steps to Take

Update Command Centre to the latest version.
Restrict operator access to sensitive data.
Monitor system logs for unauthorized access.

Long-Term Security Practices

Regularly review and update access control policies.
Conduct security training for operators to prevent unauthorized access.

Patching and Updates

Apply security patches and updates provided by Gallagher to address the vulnerability.