This vulnerability (CWE-532) involves the insertion of sensitive Service Account credentials into log files generated by some Command Centre Service installers in Gallagher Command Centre Server version 9.40. Only sites using a custom Service Account are potentially impacted. The exposure arises from installer logs that may contain these credentials, posing a risk if the logs are accessed by unauthorized parties. No official patch or fix has been released by Gallagher as of the publication date. Mitigation involves changing the Service Account password and removing the installer log files to prevent credential compromise.

The vulnerability can lead to the exposure of Service Account credentials if an attacker gains access to the installer log files containing sensitive information. This could compromise the integrity and availability of the Command Centre Server, as indicated by the CVSS vector showing low attack vector (local), low attack complexity, low privileges required, and requiring user interaction, with impact on confidentiality (low), integrity (high), and availability (high). However, only installations using custom Service Accounts are affected, limiting the scope of impact.

No official patch or fix is currently available from Gallagher. The vendor recommends that affected sites change the Service Account password to mitigate potential credential exposure. Additionally, deleting any installer log files located in %programdata%\Gallagher\Command Centre is advised to remove sensitive information from the system. Monitor vendor advisories for any future updates or patches.