CVE-2018-17482 MEDIUM

CVE-2018-17482

Vendor Jolly Technologies
Product Lobby Track Desktop
Published March 19, 2019
Last update September 17, 2024

CVSS base score

4.0/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AC:L/C:L/I:N/AV:L/PR:N/A:N/UI:N/S:U/RC:R/E:U/RL:U

What the vulnerability does

01Description

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information.

Key dates

02Disclosure timeline

March 19, 2019 CVE published
September 17, 2024 Record updated