Affected: Gallagher Command Centre Server, Gallagher Active Directory Sync, Gallagher Cardholder Sync Utility, Gallagher Diagnostics Service, Gallagher Elevator Service, Gallagher Encoding Kiosk Application, Gallagher Entra ID Sync, Gallagher Event Sync Utility, Gallagher Event Logger, Gallagher Middleware Framework and 4 more

Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.  Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.

Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.