Lucene search

IbmCVE-2018-17482

HistoryMar 21, 2019 - 4:00 p.m.

CVE-2018-17482

2019-03-2116:00:24

CWE-200

ibm

web.nvd.nist.gov

cve-2018-17482

lobby track desktop

vulnerability

local attacker

sensitive information

nvd

kiosk mode

reports

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information.

Affected configurations

Nvd

Vulners

Node

jollytechlobby_trackMatch8.2.186desktop

VendorProductVersionCPE
jollytechlobby_track8.2.186cpe:2.3:a:jollytech:lobby_track:8.2.186:*:*:*:desktop:*:*:*

Vendor	Product	Version	CPE
jollytech	lobby_track	8.2.186	cpe:2.3:a:jollytech:lobby_track:8.2.186::::desktop:::

CNA Affected

[
  {
    "product": "Lobby Track Desktop",
    "vendor": "Jolly Technologies",
    "versions": [
      {
        "status": "affected",
        "version": "8.2.186"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/149642

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2018-17482