CVE-2020-7215

An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party integrations such as DVR systems) were logged in the Command Centre event trail. Any authenticated operator with the 'view events' privilege could see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event.

• CWE-532

• https://security.gallagher.com/cve-2020-7215Vendor Advisory
• https://security.gallagher.com/cve-2020-7215Vendor Advisory

Published

Jan 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7208LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is …6.1
• CVE-2020-7209LinuxKI v6.0-1 and earlier is vulnerable to an remote code e…9.8
• CVE-2020-7210Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete us…4.3
• CVE-2020-7211tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not pr…7.5
• CVE-2020-7212The _encode_invalid_chars function in util/url.py in the url…7.5
• CVE-2020-7213Parallels 13 uses cleartext HTTP as part of the update proce…7.5
• CVE-2020-7216An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.…7.5
• CVE-2020-7217An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE…7.5
• CVE-2020-7218HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC s…7.5
• CVE-2020-7219HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC …7.5
• CVE-2020-7220HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in ce…7.5
• CVE-2020-7221mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows pr…7.8