CVE-2020-16104
Summary
| CVE | CVE-2020-16104 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-12-14 20:15:00 UTC |
| Updated | 2020-12-16 19:46:00 UTC |
| Description | SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Interfaces' privilege to execute arbitrary SQL against a third party database if EDI is configured to import data from this database. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1236(MR1); 8.20 versions prior to 8.20.1166(MR3); 8.10 versions prior to 8.10.1211(MR5); 8.00 versions prior to 8.00.1228(MR6); version 7.90 and prior versions. |
Risk And Classification
Problem Types: CWE-89
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Gallagher | Command Centre | All | All | All | All |
| Application | Gallagher | Command Centre | 8.00.1228 | - | All | All |
| Application | Gallagher | Command Centre | 8.00.1228 | maintenance_release6 | All | All |
| Application | Gallagher | Command Centre | 8.10.1211 | - | All | All |
| Application | Gallagher | Command Centre | 8.10.1211 | maintenance_release5 | All | All |
| Application | Gallagher | Command Centre | 8.20.1166 | - | All | All |
| Application | Gallagher | Command Centre | 8.20.1166 | maintenance_release3 | All | All |
| Application | Gallagher | Command Centre | 8.30.1236 | - | All | All |
| Application | Gallagher | Command Centre | 8.30.1236 | maintenance_release1 | All | All |
| Application | Gallagher | Command Centre | All | All | All | All |
| Application | Gallagher | Command Centre | 8.00.1228 | - | All | All |
| Application | Gallagher | Command Centre | 8.00.1228 | maintenance_release6 | All | All |
| Application | Gallagher | Command Centre | 8.10.1211 | - | All | All |
| Application | Gallagher | Command Centre | 8.10.1211 | maintenance_release5 | All | All |
| Application | Gallagher | Command Centre | 8.20.1166 | - | All | All |
| Application | Gallagher | Command Centre | 8.20.1166 | maintenance_release3 | All | All |
| Application | Gallagher | Command Centre | 8.30.1236 | - | All | All |
| Application | Gallagher | Command Centre | 8.30.1236 | maintenance_release1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| CVE-2020-16104 | MISC | security.gallagher.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.