Privilege Escalation Vulnerability in EasyLobby Solo by Alertus Technologies
CVE-2018-17491

8.4HIGH

Key Information:

Vendor

Hid Global

Status
Easylobby Solo
Vendor
CVE Published:
21 March 2019

What is CVE-2018-17491?

A vulnerability in EasyLobby Solo could enable a local attacker to leverage kiosk access to gain elevated privileges. By simply aborting the program using the 'esc' key, an attacker may perform unauthorized actions that compromise the system's integrity. This issue underscores the necessity for securing kiosk environments to prevent unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EasyLobby Solo 11.0.4563

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/149651
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.