CVE-2018-17482

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode

Medium · published March 19, 2019

CVSS v3.0
4.0
EPSS
0%
Percentile
27.2
In the wild
Unconfirmed
What it is

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information.

The record
Technical detail
CVSS v3.0
4.0 · MEDIUM
Vector
CVSS:3.0/AC:L/C:L/I:N/AV:L/PR:N/A:N/UI:N/S:U/RC:R/E:U/RL:U
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.2th percentile
Published
2019-03-19T19:47Z
EPSS history
Timeline
  • 19 MAR 19:47Z
    Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode
    cvelistv5