Approved changes feed: RSS · Atom

cpe:2.3:a:gallagher:cardholder_sync_utility:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGallagher (1a83fbe6-3e6e-58bd-a69d-5a0946535413)
ProductCardholder Sync Utility (40892628-b745-5f02-ba4c-4df3099f39e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25193 vulnerable 2026-06-03 15:16:54.272865 Details available
HIGH (8.1)
Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.  Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted. Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
Published: 2026-05-25T05:28:14.766Z
Updated: 2026-05-26T14:24:08.348Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.