CVE-2018-17486 LOW

CVE-2018-17486

Vendor Jolly Technologies
Product Lobby Track Desktop
Published March 19, 2019
Last update September 16, 2024

CVSS base score

2.9/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/C:N/AC:H/I:L/AV:L/PR:N/A:N/UI:N/S:U/RC:R/RL:U/E:U

What the vulnerability does

01Description

Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.

Key dates

02Disclosure timeline

March 19, 2019 CVE published
September 16, 2024 Record updated