CVE-2018-17495

Published: Mar 21, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prompt.

Affected (1)

Products: Thresholdsecurity: Evisitorpass

Thresholdsecurity

1 product

Evisitorpass

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Thresholdsecurity Evisitorpass	Version 1.5.5.2

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/149655

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/149655

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.