VULNERABILITY INTELLIGENCE
CVE-2018-17486
CVSS score2.9 LOW
EPSS probability0.32%
CISA KEVNot currently listed
Published2019-03-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.
Primary references
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry