cvelist/2018/17xxx/CVE-2018-17482.json

{
    "description": {
        "description_data": [
            {
                "value": "Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information.",
                "lang": "eng"
            }
        ]
    },
    "data_version": "4.0",
    "references": {
        "reference_data": [
            {
                "title": "X-Force Vulnerability Report",
                "name": "lobby-track-cve201817482-info-disc (149642)",
                "refsource": "XF",
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/149642"
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "value": "Obtain Information",
                        "lang": "eng"
                    }
                ]
            }
        ]
    },
    "data_type": "CVE",
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "product": {
                        "product_data": [
                            {
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "8.2.186"
                                        }
                                    ]
                                },
                                "product_name": "Lobby Track Desktop"
                            }
                        ]
                    },
                    "vendor_name": "Jolly Technologies"
                }
            ]
        }
    },
    "impact": {
        "cvssv3": {
            "TM": {
                "RC": "R",
                "E": "U",
                "RL": "U"
            },
            "BM": {
                "AC": "L",
                "C": "L",
                "SCORE": "4.000",
                "I": "N",
                "AV": "L",
                "PR": "N",
                "A": "N",
                "UI": "N",
                "S": "U"
            }
        }
    },
    "data_format": "MITRE",
    "CVE_data_meta": {
        "DATE_PUBLIC": "2019-03-04T00:00:00",
        "ASSIGNER": "psirt@us.ibm.com",
        "ID": "CVE-2018-17482",
        "STATE": "PUBLIC"
    }
}