CVE-2018-17488 HIGH

CVE-2018-17488

Vendor Jolly Technologies
Product Lobby Track Desktop
Published March 19, 2019
Last update September 16, 2024

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/UI:N/S:U/AV:L/A:H/PR:N/I:H/AC:L/C:H/E:U/RL:U/RC:R

What the vulnerability does

01Description

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and accessing the print badge screen, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.

Key dates

02Disclosure timeline

March 19, 2019 CVE published
September 16, 2024 Record updated