CVE-2018-17487

CVE-2018-17487 affects Lobby Track Desktop; local attacker could gain elevated privileges due to an error in the printer dialog. By visiting the kiosk and signing in as a visitor, an attacker could use the command line to break out of kiosk mode. Documents describe local privilege escalation and ...

CVE-2018-17484

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By using attack vectors outlined in kiosk breakout, an attacker could exploit this vulnerability to view and edit the database...

CVE-2018-17486

CVE-2018-17486 affects Lobby Track Desktop (Jolly Technologies). In kiosk mode, an error in the find visitor function could let a local attacker bypass security restrictions and, by visiting the kiosk and using the find visitor option, delete visitor records or remove a host. The available connec...

CVE-2018-17482

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information...

CVE-2018-17482

CVE-2018-17482 affects Lobby Track Desktop (visitor management app by Jolly Technologies). A vulnerability in the kiosk-mode Reports component allows a local attacker to disclose sensitive information by visiting the kiosk and interacting with Reports, potentially gaining access to all visitor re...

PT-2019-9485

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in the find visitor function while in kiosk mode, allowing a local attacker to bypass security restrictions. An attacker could exploit this by...

CVE-2018-17485: Initialization of a Resource with an Insecure Default

Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...

PT-2019-9482

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue allows a local attacker to obtain sensitive information due to an error in Reports while in kiosk mode. An attacker could exploit this by visiting the kiosk and viewing...

PT-2019-9483

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in the Sample Database.mdb database when Lobby Track Desktop is in kiosk mode. This could allow a local attacker to obtain sensitive information. A...

PT-2019-9486

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in the printer dialog, allowing a local attacker to gain elevated privileges on the system. An attacker could exploit this by visiting the kiosk,...

PT-2019-9487

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in the printer dialog, allowing a local attacker to gain elevated privileges on the system. An attacker could exploit this by visiting the kiosk,...

PT-2019-9481

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in Reports while in kiosk mode, allowing a local attacker to obtain sensitive information. An attacker could exploit this by visiting the kiosk and...

PT-2019-9484

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue concerns default administrative credentials in the application, which could be exploited by an attacker to gain full access. Recommendations At the moment, there is no...

CVE-2018-17488: Undefined Security Weakness

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and accessing the print badge screen, an attacker could exploit this vulnerability using the command line to break out of kiosk mode...

CVE-2018-17484: Exposure of Sensitive Information to an Unauthorized Actor

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By using attack vectors outlined in kiosk breakout, an attacker could exploit this vulnerability to view and edit the database...

CVE-2018-17482: Exposure of Sensitive Information to an Unauthorized Actor

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information...

CVE-2018-17487: Undefined Security Weakness

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and signing in as a visitor, an attacker could exploit this vulnerability using the command line to break out of kiosk mode...

CVE-2018-17486: Undefined Security Weakness

Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host...

CVE-2018-17483: Exposure of Sensitive Information to an Unauthorized Actor

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and viewing the driver's license column, an attacker could exploit this vulnerability to view the driver's license number and other personal...

PT-2019-2664

Name of the Vulnerable Software and Affected Versions U.motion Builder version 1.3.4 Description A SQL Injection issue exists in the software, which could cause unwanted code execution when an improper set of characters is entered. The vulnerability is related to incorrect handling of special...