Skip to content
OpenAdvisories
High · 8.4 CVE-2018-17496 EUVD-2018-9249GHSA-hc9q-w29j-g2mr

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode. By visiting th…

Published Mar 19, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Description

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode. By visiting the kiosk and typing ctrl+shift+esc, an attacker could exploit this vulnerability to open the task manager to kill the process or launch new processes on the system.

Affected products

VendorProductAffectedFixed
VisitorPass eVisitorPass 1.5.5.2 —

References