CVE-2018-17494

Published: Mar 21, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Start Menu. By visiting the kiosk and pressing windows key twice, an attacker could exploit this vulnerability to close the program and launch other processes on the system.

Affected (1)

Products: Thresholdsecurity: Evisitorpass

Thresholdsecurity

1 product

Evisitorpass

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Thresholdsecurity Evisitorpass	Version 1.5.5.2

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/149654

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/149654

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.