CVE-2018-17489 LOW

CVE-2018-17489

Vendor Hid Global
Product EasyLobby Solo
Published March 19, 2019
Last update September 16, 2024

CVSS base score

2.9/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/S:U/UI:N/I:N/A:N/PR:N/AV:L/C:L/AC:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext. By visiting the kiosk and viewing the Visitor table of the database, an attacker could exploit this vulnerability to view stored social security numbers.

Key dates

02Disclosure timeline

March 19, 2019 CVE published
September 16, 2024 Record updated