Gallagher Command Centre Mobile Client Cleartext Storage of Session Token Vulnerability

A vulnerability exists in the Gallagher Command Centre Mobile Client for Android and iOS, specifically in versions prior to 9.40.123. This issue involves the cleartext storage of sensitive information, allowing an attacker with access to a logged-in operator's mobile device to extract the session token. Such extraction could be used to exploit access for a limited duration.

Impact

Exploitation of this vulnerability could lead to unauthorized access by allowing an attacker to use the extracted session token to access the Command Centre Mobile Client on behalf of the logged-in operator, for a limited time.