CVE-2018-17486
Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode
Low · published March 19, 2019
What it is
Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.
The record
Technical detail
- CVSS v3.0
- 2.9 · LOW
- Vector
- CVSS:3.0/C:N/AC:H/I:L/AV:L/PR:N/A:N/UI:N/S:U/RC:R/RL:U/E:U
- CVSS v4.0
- Not supplied
- EPSS
- 0.00316 · 23.3th percentile
- Published
- 2019-03-19T19:47Z
EPSS history
Timeline