Описание
Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:jollytech:lobby_track:8.2.186:*:*:*:desktop:*:*:*
EPSS
Процентиль: 17%
0.00055
Низкий
2.9 Low
CVSS3
5.5 Medium
CVSS3
3.6 Low
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.
EPSS
Процентиль: 17%
0.00055
Низкий
2.9 Low
CVSS3
5.5 Medium
CVSS3
3.6 Low
CVSS2
Дефекты
NVD-CWE-noinfo