CVE-2018-17489
- State
- Published
- Severity
- 2.9 Low
- Published
- Mar 19, 2019
- Updated
- Sep 16, 2024
- Reserved
- Sep 25, 2018
Description
EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext. By visiting the kiosk and viewing the Visitor table of the database, an attacker could exploit this vulnerability to view stored social security numbers.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 2.9 Low | CVSS:3.0/S:U/UI:N/I:N/A:N/PR:N/AV:L/C:L/AC:H/E:U/RL:O/RC:C | ibm |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
EasyLobby SoloHID Global |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.