CVE-2018-17487

Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and signing in as a visitor, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.

Score

CVSS 3.0 8.4 High

Status

Modified - psirt@us.ibm.com

Published

2019-03-21

Last modified

2024-09-16

Affected products

• Lobby Track Desktop (Jolly Technologies)
• Lobby Track (Jollytech)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/149647