CVE-2023-23568
Possible ATT&CK Techniques 1AI
T1078 · Valid AccountsGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-23568
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This issue affects Command Centre: vEL 8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Gallagher Command Centre Server 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gallagher Command Centre Server是新西兰Gallagher公司的一个用于对建筑物内基础设施进行监控、管理的管理系统。 Command Centre Server 存在安全漏洞，该漏洞源于不当权限验证允许经过身份验证的非特权操作员修改和查看个人数据字段。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Gallagher | Command Centre | vEL8.90 ~ 1318 | - |
II. Public POCs for CVE-2023-23568
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-23568
请登录查看更多情报信息。
Other References for CVE-2023-23568 (1)
IV. Related Vulnerabilities
Same weakness: CWE-285
- CVE-2026-77686
Dolibarr Account card.php improper authorization - CVE-2026-66722
Apache CloudStack: ProjectRole & ProjectRolePermission autho - CVE-2026-54624
django CMS: Structure endpoint bypasses page-view permission - CVE-2026-77036
elunez eladmin GenConfigController improper authorization - CVE-2026-18283
Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerab
V. Comments for CVE-2023-23568
No comments yet