Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-799x-hcrc-c72v

Опубликовано: 03 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.6

Описание

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams.

This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams.

This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

EPSS

Процентиль: 6%
0.00022
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-319

Связанные уязвимости

CVSS3: 5.6
nvd
около 2 месяцев назад

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

EPSS

Процентиль: 6%
0.00022
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-319