CVE-2018-17484 describes a local information disclosure and modification vulnerability in Jolly Technologies Lobby Track Desktop, specifically within the Sample Database.mdb when the software is operating in kiosk mode. A local attacker, leveraging kiosk breakout techniques, could exploit this flaw to view and edit the database, leading to a high-severity impact on confidentiality and integrity. With a CVSS score of 7.1, this vulnerability is relatively easy to exploit locally. While no public exploit code or active exploitation is reported, the vulnerability has received some community and media attention, indicating its potential risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.2.186CPE matchmatch criteria | cpe:2.3:a:jollytech:lobby_track:8.2.186:*:*:*:desktop:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.