CVEvulnerability
CVE-2018-17491
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-03-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.4 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-862
Description
EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing "esc" to exit the program, an attacker could exploit this vulnerability to perform unauthorized actions on the computer.
Affected configurations
• hidglobal easylobby solo 11.0.4563
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/149651 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/149651 Third Party Advisory, VDB Entry