Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jp2p-37cw-qg8c

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.

EPSS

Процентиль: 19%
0.0006
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-668

Связанные уязвимости

CVSS3: 6.6
nvd
почти 9 лет назад

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.

EPSS

Процентиль: 19%
0.0006
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-668