{"id":"CVE-2018-17491","state":"PUBLISHED","title":"EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing \"esc\" to exit the program, an attacker could exploit this vu","description":"EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing \"esc\" to exit the program, an attacker could exploit this vulnerability to perform unauthorized actions on the computer.","publishedAt":"2019-03-19T19:47:41.374Z","updatedAt":"2024-09-16T20:51:35.415Z","severity":{"score":8.4,"label":"High","version":"3.0","vector":"CVSS:3.0/AC:L/C:H/PR:N/A:H/AV:L/I:H/S:U/UI:N/RC:C/RL:O/E:U","source":"ibm"},"assigner":"ibm","products":["HID Global EasyLobby Solo"],"affected":[{"vendor":"HID Global","product":"EasyLobby Solo","versions":[{"version":"11.0.4563","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/149651"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:28.183Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/17xxx/CVE-2018-17491.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-17491","state":"PUBLISHED","datePublished":"2019-03-19T19:47:41.374Z","dateUpdated":"2024-09-16T20:51:35.415Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2018-09-25T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing \"esc\" to exit the program, an attacker could exploit this vulnerability to perform unauthorized actions on the computer."}],"affected":[{"vendor":"HID Global","product":"EasyLobby Solo","versions":[{"version":"11.0.4563","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/149651","name":"easylobby-program-cve201817491-priv-esc (149651)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","exploitCodeMaturity":"UNPROVEN","integrityImpact":"HIGH","privilegesRequired":"NONE","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":7.3,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.0/AC:L/C:H/PR:N/A:H/AV:L/I:H/S:U/UI:N/RC:C/RL:O/E:U","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Gain Privileges","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2019-03-19T19:47:41.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2019-03-04T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2019-03-04T00:00:00","ID":"CVE-2018-17491","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"EasyLobby Solo","version":{"version_data":[{"version_value":"11.0.4563"}]}}]},"vendor_name":"HID Global"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing \"esc\" to exit the program, an attacker could exploit this vulnerability to perform unauthorized actions on the computer."}]},"impact":{"cvssv3":{"BM":{"A":"H","AC":"L","AV":"L","C":"H","I":"H","PR":"N","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Gain Privileges"}]}]},"references":{"reference_data":[{"name":"easylobby-program-cve201817491-priv-esc (149651)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/149651"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/149651","name":"easylobby-program-cve201817491-priv-esc (149651)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T10:47:04.977Z"}}]}}}