CVE-2018-17482

CVE-2018-17482 affects Lobby Track Desktop (visitor management app by Jolly Technologies). A vulnerability in the kiosk-mode Reports component allows a local attacker to disclose sensitive information by visiting the kiosk and interacting with Reports, potentially gaining access to all visitor re...

CVE-2018-17485: Initialization of a Resource with an Insecure Default

Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...

PT-2019-9482

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue allows a local attacker to obtain sensitive information due to an error in Reports while in kiosk mode. An attacker could exploit this by visiting the kiosk and viewing...

PT-2019-9481

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in Reports while in kiosk mode, allowing a local attacker to obtain sensitive information. An attacker could exploit this by visiting the kiosk and...

PT-2019-9483

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in the Sample Database.mdb database when Lobby Track Desktop is in kiosk mode. This could allow a local attacker to obtain sensitive information. A...

PT-2019-9486

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in the printer dialog, allowing a local attacker to gain elevated privileges on the system. An attacker could exploit this by visiting the kiosk,...

PT-2019-9487

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in the printer dialog, allowing a local attacker to gain elevated privileges on the system. An attacker could exploit this by visiting the kiosk,...

PT-2019-9484

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue concerns default administrative credentials in the application, which could be exploited by an attacker to gain full access. Recommendations At the moment, there is no...

CVE-2018-17488: Undefined Security Weakness

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and accessing the print badge screen, an attacker could exploit this vulnerability using the command line to break out of kiosk mode...

CVE-2018-17484: Exposure of Sensitive Information to an Unauthorized Actor

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By using attack vectors outlined in kiosk breakout, an attacker could exploit this vulnerability to view and edit the database...

CVE-2018-17482: Exposure of Sensitive Information to an Unauthorized Actor

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information...

CVE-2018-17487: Undefined Security Weakness

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and signing in as a visitor, an attacker could exploit this vulnerability using the command line to break out of kiosk mode...

CVE-2018-17486: Undefined Security Weakness

Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host...

CVE-2018-17483: Exposure of Sensitive Information to an Unauthorized Actor

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and viewing the driver's license column, an attacker could exploit this vulnerability to view the driver's license number and other personal...

PT-2019-9485

Name of the Vulnerable Software and Affected Versions Lobby Track Desktop affected versions not specified Description The issue is caused by an error in the find visitor function while in kiosk mode, allowing a local attacker to bypass security restrictions. An attacker could exploit this by...

PT-2019-2664

Name of the Vulnerable Software and Affected Versions U.motion Builder version 1.3.4 Description A SQL Injection issue exists in the software, which could cause unwanted code execution when an improper set of characters is entered. The vulnerability is related to incorrect handling of special...

A Second Life for the 'Do Not Track' Setting—With Teeth

In recent years, the setting has been criticized as being essentially meaningless. But it might have a crucial role to play in enforcing privacy regulations...

Will pay-for-privacy be the new normal?

Privacy is a human right, and online privacy should be no exception. Yet, as the US considers new laws to protect individuals’ online data, at least two proposals—one statewide law that can still be amended and one federal draft bill that has yet to be introduced—include an unwelcome bargain:...

ToRPEDO Privacy Attack on 4G/5G Networks Affects All U.S. Carriers

Privacy-breaking flaws in the 4G and 5G mobile protocols could allow attackers to intercept calls, send fake amber alerts or other notifications, track location and more, according to a research team from Purdue University and the University of Iowa. In a paper presented at Mobile World Congress ...

Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-13) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...