Approved changes feed: RSS · Atom

cpe:2.3:a:jolly_technologies:lobby_track_desktop:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJolly Technologies (f0800b04-28ed-5cd9-adbd-992ce41bbaaf)
ProductLobby Track Desktop (858c228a-9d33-5192-89c7-9cc881bace91)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17488 vulnerable 2026-06-08 05:11:06.417095 Details available
HIGH (8.4)
Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and accessing the print badge screen, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.
Published: 2019-03-19T19:47:41.265Z
Updated: 2024-09-16T17:39:20.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17487 vulnerable 2026-06-08 05:11:06.416774 Details available
HIGH (8.4)
Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and signing in as a visitor, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.
Published: 2019-03-19T19:47:41.225Z
Updated: 2024-09-16T22:03:35.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17486 vulnerable 2026-06-08 05:11:06.416266 Details available
LOW (2.9)
Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.
Published: 2019-03-19T19:47:41.184Z
Updated: 2024-09-16T19:40:23.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17485 vulnerable 2026-06-08 05:11:06.415839 Details available
HIGH (8.4)
Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.
Published: 2019-03-19T19:47:41.139Z
Updated: 2024-09-17T02:05:43.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17484 vulnerable 2026-06-08 05:11:06.415526 Details available
MEDIUM (4)
Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By using attack vectors outlined in kiosk breakout, an attacker could exploit this vulnerability to view and edit the database.
Published: 2019-03-19T19:47:41.089Z
Updated: 2024-09-16T22:55:41.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17483 vulnerable 2026-06-08 05:11:06.415180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17482 vulnerable 2026-06-08 05:11:06.413725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.