CVE-2021-23230 - Vulnerability Details

Vendors	Products
Gallagher	Command Centre

Link	Providers
https://security.gallagher.com/Security-Advisories/CVE-2021-23230

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Command Centre", "vendor": "Gallagher", "versions": [{"lessThanOrEqual": "8.00", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "8.40.1888 (MR3)", "status": "affected", "version": "8.40", "versionType": "custom"}, {"lessThan": "8.30.1359 (MR3)", "status": "affected", "version": "8.30", "versionType": "custom"}, {"lessThan": "8.20.1259 (MR5)", "status": "affected", "version": "8.20", "versionType": "custom"}, {"lessThan": "8.10.1284 (MR7)", "status": "affected", "version": "8.10", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 SQL Injection", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-06-11T15:46:01", "orgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "shortName": "Gallagher"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://security.gallagher.com/Security-Advisories/CVE-2021-23230"}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "disclosures@gallagher.com", "ID": "CVE-2021-23230", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Command Centre", "version": {"version_data": [{"version_affected": "<", "version_name": "8.40", "version_value": "8.40.1888 (MR3)"}, {"version_affected": "<", "version_name": "8.30", "version_value": "8.30.1359 (MR3)"}, {"version_affected": "<", "version_name": "8.20", "version_value": "8.20.1259 (MR5)"}, {"version_affected": "<", "version_name": "8.10", "version_value": "8.10.1284 (MR7)"}, {"version_affected": "<=", "version_value": "8.00"}]}}]}, "vendor_name": "Gallagher"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-89 SQL Injection"}]}]}, "references": {"reference_data": [{"name": "https://security.gallagher.com/Security-Advisories/CVE-2021-23230", "refsource": "MISC", "url": "https://security.gallagher.com/Security-Advisories/CVE-2021-23230"}]}, "source": {"discovery": "INTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T19:05:55.287Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://security.gallagher.com/Security-Advisories/CVE-2021-23230"}]}]}, "cveMetadata": {"assignerOrgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "assignerShortName": "Gallagher", "cveId": "CVE-2021-23230", "datePublished": "2021-06-11T15:46:01", "dateReserved": "2021-01-26T00:00:00", "dateUpdated": "2024-08-03T19:05:55.287Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Command Centre (string)

vendor : Gallagher (string)

versions : [ »

0 : { »

lessThanOrEqual : 8.00 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : 8.40.1888 (MR3) (string)

status : affected (string)

version : 8.40 (string)

versionType : custom (string)

}

2 : { »

lessThan : 8.30.1359 (MR3) (string)

status : affected (string)

version : 8.30 (string)

versionType : custom (string)

}

3 : { »

lessThan : 8.20.1259 (MR5) (string)

status : affected (string)

version : 8.20 (string)

versionType : custom (string)

}

4 : { »

lessThan : 8.10.1284 (MR7) (string)

status : affected (string)

version : 8.10 (string)

versionType : custom (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.9 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-89 (string)

description : CWE-89 SQL Injection (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-06-11T15:46:01 (string)

orgId : 0c426f27-3ee1-4eff-be88-288d5a1822bc (string)

shortName : Gallagher (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://security.gallagher.com/Security-Advisories/CVE-2021-23230 (string)

}

]

source : { »

discovery : INTERNAL (string)

}

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : disclosures@gallagher.com (string)

ID : CVE-2021-23230 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Command Centre (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_name : 8.40 (string)

version_value : 8.40.1888 (MR3) (string)

}

1 : { »

version_affected : < (string)

version_name : 8.30 (string)

version_value : 8.30.1359 (MR3) (string)

}

2 : { »

version_affected : < (string)

version_name : 8.20 (string)

version_value : 8.20.1259 (MR5) (string)

}

3 : { »

version_affected : < (string)

version_name : 8.10 (string)

version_value : 8.10.1284 (MR7) (string)

}

4 : { »

version_affected : <= (string)

version_value : 8.00 (string)

}

]

}

]

}

vendor_name : Gallagher (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions. (string)

}

]

}

generator : { »

engine : Vulnogram 0.0.9 (string)

}

impact : { »

cvss : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.9 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-89 SQL Injection (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://security.gallagher.com/Security-Advisories/CVE-2021-23230 (string)

refsource : MISC (string)

url : https://security.gallagher.com/Security-Advisories/CVE-2021-23230 (string)

}

]

}

source : { »

discovery : INTERNAL (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T19:05:55.287Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://security.gallagher.com/Security-Advisories/CVE-2021-23230 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 0c426f27-3ee1-4eff-be88-288d5a1822bc (string)

assignerShortName : Gallagher (string)

cveId : CVE-2021-23230 (string)

datePublished : 2021-06-11T15:46:01 (string)

dateReserved : 2021-01-26T00:00:00 (string)

dateUpdated : 2024-08-03T19:05:55.287Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "matchCriteriaId": "63D6F225-FF42-4B2A-9CAE-0DF2366F28E3", "versionEndIncluding": "8.00", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "matchCriteriaId": "265809A9-AA8A-41E1-A3A7-E1CC6157D087", "versionEndExcluding": "8.10.1284", "versionStartIncluding": "8.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "matchCriteriaId": "A95D4CF5-6A49-45A4-A145-D12ACCA0FF6C", "versionEndExcluding": "8.20.1259", "versionStartIncluding": "8.20", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "matchCriteriaId": "EB8A27CD-C93A-4ED5-AECE-39EB05788C5B", "versionEndExcluding": "8.30.1359", "versionStartIncluding": "8.30", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "matchCriteriaId": "E2157A0E-4B51-4D16-8A6E-0FC711C1961B", "versionEndExcluding": "8.40.1888", "versionStartIncluding": "8.40", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:command_centre:8.10.1284:-:*:*:*:*:*:*", "matchCriteriaId": "D8C88566-E97C-46A1-97A9-842B68B2B255", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:command_centre:8.20.1259:-:*:*:*:*:*:*", "matchCriteriaId": "3C951E03-F376-4D1B-92EB-29D8EDF3088C", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:command_centre:8.30.1359:-:*:*:*:*:*:*", "matchCriteriaId": "9C4D6597-1327-443C-9D8A-DADD1DCFB527", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:command_centre:8.40.1888:-:*:*:*:*:*:*", "matchCriteriaId": "BEAAFEE0-3595-47D2-9B84-7A56320C7FE6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions."}, {"lang": "es", "value": "Una vulnerabilidad de Inyecci\u00f3n SQL en la interfaz OPCUA de Gallagher Command Centre, permite a un operador remoto no privilegiado de Command Centre modificar las bases de datos de Command Centre sin ser detectado. Este problema afecta a: Gallagher Command Centre versiones 8.40 anteriores a 8.40.1888 (MR3); versiones 8.30 anteriores a 8.30.1359 (MR3);  versiones 8.20 anteriores a 8.20.1259 (MR5); versiones 8.10 anteriores a 8.10.1284 (MR7); versiones 8.00 y anteriores"}], "id": "CVE-2021-23230", "lastModified": "2024-11-21T05:51:24.627", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 6.0, "source": "disclosures@gallagher.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-06-11T16:15:12.367", "references": [{"source": "disclosures@gallagher.com", "tags": ["Vendor Advisory"], "url": "https://security.gallagher.com/Security-Advisories/CVE-2021-23230"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.gallagher.com/Security-Advisories/CVE-2021-23230"}], "sourceIdentifier": "disclosures@gallagher.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "disclosures@gallagher.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 63D6F225-FF42-4B2A-9CAE-0DF2366F28E3 (string)

versionEndIncluding : 8.00 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 265809A9-AA8A-41E1-A3A7-E1CC6157D087 (string)

versionEndExcluding : 8.10.1284 (string)

versionStartIncluding : 8.10 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A95D4CF5-6A49-45A4-A145-D12ACCA0FF6C (string)

versionEndExcluding : 8.20.1259 (string)

versionStartIncluding : 8.20 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:* (string)

matchCriteriaId : EB8A27CD-C93A-4ED5-AECE-39EB05788C5B (string)

versionEndExcluding : 8.30.1359 (string)

versionStartIncluding : 8.30 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E2157A0E-4B51-4D16-8A6E-0FC711C1961B (string)

versionEndExcluding : 8.40.1888 (string)

versionStartIncluding : 8.40 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:gallagher:command_centre:8.10.1284:-:*:*:*:*:*:* (string)

matchCriteriaId : D8C88566-E97C-46A1-97A9-842B68B2B255 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:gallagher:command_centre:8.20.1259:-:*:*:*:*:*:* (string)

matchCriteriaId : 3C951E03-F376-4D1B-92EB-29D8EDF3088C (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:gallagher:command_centre:8.30.1359:-:*:*:*:*:*:* (string)

matchCriteriaId : 9C4D6597-1327-443C-9D8A-DADD1DCFB527 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:gallagher:command_centre:8.40.1888:-:*:*:*:*:*:* (string)

matchCriteriaId : BEAAFEE0-3595-47D2-9B84-7A56320C7FE6 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad de Inyección SQL en la interfaz OPCUA de Gallagher Command Centre, permite a un operador remoto no privilegiado de Command Centre modificar las bases de datos de Command Centre sin ser detectado. Este problema afecta a: Gallagher Command Centre versiones 8.40 anteriores a 8.40.1888 (MR3); versiones 8.30 anteriores a 8.30.1359 (MR3); versiones 8.20 anteriores a 8.20.1259 (MR5); versiones 8.10 anteriores a 8.10.1284 (MR7); versiones 8.00 y anteriores (string)

}

]

id : CVE-2021-23230 (string)

lastModified : 2024-11-21T05:51:24.627 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : LOW (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : NONE (string)

baseScore : 3.5 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:S/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 6.8 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.9 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.1 (number)

impactScore : 6 (number)

source : disclosures@gallagher.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-06-11T16:15:12.367 (string)

references : [ »

0 : { »

source : disclosures@gallagher.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.gallagher.com/Security-Advisories/CVE-2021-23230 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.gallagher.com/Security-Advisories/CVE-2021-23230 (string)

}

]

sourceIdentifier : disclosures@gallagher.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-89 (string)

}

]

source : disclosures@gallagher.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-89 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object