Description
Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By using attack vectors outlined in kiosk breakout, an attacker could exploit this vulnerability to view and edit the database.
References (1)
Core 1
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/149644
Scores
CVSS v3
4.0
EPSS
0.0031
EPSS Percentile
22.5%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Details
CWE
CWE-200
Status
published
Products (1)
jollytech/lobby_track
8.2.186
Published
Mar 21, 2019
Tracked Since
Feb 18, 2026