MeldSecurity
Press Enter to search
CVE Database & Search →
Sign In Get Started

CVE-2025-47147

🟡 MEDIUM

Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the s...

Published
Mar 03, 2026
Last Modified
Mar 03, 2026
Views
6
Bookmarks
0

Description

Request Expert Review

Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile Client versions prior to 9.40.123.

CVSS Scores

CVSS 3.1 5.7
5.7
MEDIUM
CVSS 2.0 5.7

References

security.gallagher.com

Additional Information

Source
disclosures@gallagher.com
State
Received

Related CVEs

CVE-2026-3455

MEDIUM

Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitis...

Score: 6.1

CVE-2026-3449

LOW

Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option i...

Score: 3.3

CVE-2026-1492

CRITICAL

The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin...

Score: 9.8

CVE-2026-20801

MEDIUM

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations all...

Score: 5.6

CVE-2026-20757

LOW

Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Comm...

Score: 2.5

CVE-2026-2628

CRITICAL

The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and in...

Score: 9.8

Share CVE-2025-47147

Share on Social Media

Copy Link

Embed Code

Request Expert Analysis

Request a professional security analysis for CVE-2025-47147 from our verified experts.

Credits System

Use your credits to get expert analysis from verified security professionals. Purchase more credits anytime!

Add 3 credits for accelerated delivery

Base Cost: 8 credits
Priority Upgrade: + credits
SLA Acceleration: +3 credits
Total Cost:
Your Balance:

Insufficient Credits

You need more credits to submit this request.

Buy Credits

Report Analysis