CVE-2018-17483 - Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode

Back Back to CVE browser

MEDIUM

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode

Published Mar 19, 2019

5.5

MEDIUM

CVSS 3.0

EPSS 0.30%

Description

Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and viewing the driver's license column, an attacker could exploit this vulnerability to view the driver's license number and other personal information.

Affected products

Vendor Jolly Technologies Product Lobby Track Desktop Default
n/a
- Version
  8.2.186
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jolly Technologies

Lobby Track Desktop

n/a

Version	Status	Constraints
8.2.186	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-9236
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/149643
vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-9236		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/149643		vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry