What is the CVSS score of CVE-2025-47147?

CVE-2025-47147 has a CVSS 3.1 base score of 5.7 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Command Centre Mobile are affected by CVE-2025-47147?

CVE-2025-47147 presents moderate security risk, a cleartext storage vulnerability rated CVSS 5.7. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-47147?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review data exposure and access controls.

Command Centre Mobile CVE-2025-47147

MEDIUM

Cleartext Storage of Sensitive Information (CWE-312)

2026-03-03 disclosures@gallagher.com

Information Disclosure Google Apple Command Centre Mobile Gallagher

5.7

CVSS 3.1 · Vendor: gallagher

Severity by source

Vendor (gallagher) PRIMARY

5.7 MEDIUM

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Primary rating from Vendor (gallagher) · only source for this CVE.

CVSS VectorVendor: gallagher

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 03, 2026 - 03:15 nvd

MEDIUM 5.7

DescriptionCVE.org

Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration.

This issue affects Command Centre Mobile Client versions prior to 9.40.123.

AnalysisAI

s mobile device to extract the session token and exploit access for a limited duration.

This issue affects Command Centre Mobile Client versions up to 9.40.123. is affected by cleartext storage of sensitive information (CVSS 5.7).

Technical ContextAI

This vulnerability (CWE-312: Cleartext Storage of Sensitive Information) affects s mobile device to extract the session token and exploit access for a limited duration.

This issue affects Command Centre Mobile Client. Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration.

This issue affects Command Centre Mobile Client versions prior to 9.40.123.