CVE Database
/

CVE-2018-17482

Back to search

CVE-2018-17482

Published: Mar 19, 2019

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.0

4.0

MEDIUM

Description

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information.

VendorProductVersions

Jolly Technologies

Lobby Track Desktop

affected
8.2.186

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AC:L/C:L/I:N/AV:L/PR:N/A:N/UI:N/S:U/RC:R/E:U/RL:U

Attack Complexity

Low

Confidentiality

Low

Integrity

None

Attack Vector

Local

Privileges Required

None

Availability

None

User Interaction

None

Scope

Unchanged

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now