CVE-2018-17486

Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode

Low · published March 19, 2019

CVSS v3.0
2.9
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.

The record
Technical detail
CVSS v3.0
2.9 · LOW
Vector
CVSS:3.0/C:N/AC:H/I:L/AV:L/PR:N/A:N/UI:N/S:U/RC:R/RL:U/E:U
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.3th percentile
Published
2019-03-19T19:47Z
EPSS history
Timeline
  • 19 MAR 19:47Z
    Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode
    cvelistv5