CVE-2018-17493
- State
- Published
- Severity
- 8.4 High
- Published
- Mar 19, 2019
- Updated
- Sep 16, 2024
- Reserved
- Sep 25, 2018
Description
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscreen button. By visiting the kiosk and clicking the full screen button in the bottom right, an attacker could exploit this vulnerability to close the program and launch other processes on the system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 8.4 High | CVSS:3.0/AC:L/C:H/I:H/AV:L/A:H/PR:N/UI:N/S:U/E:U/RL:O/RC:C | ibm |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
eVisitorPassVisitorPass |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.