CVE-2018-17489

LOW

HID Global EasyLobby Solo - Cleartext Storage of Sensitive Information in Visitor Database

Title source: llm
STIX 2.1

Description

EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext. By visiting the kiosk and viewing the Visitor table of the database, an attacker could exploit this vulnerability to view stored social security numbers.

References (1)

Core 1
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/149649

Scores

CVSS v3 2.9
EPSS 0.0021
EPSS Percentile 10.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-312
Status published
Products (1)
hidglobal/easylobby_solo 11.0.4563
Published Mar 21, 2019
Tracked Since Feb 18, 2026