description: Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and viewing the driver's license column, an attacker could exploit this vulnerability to view the driver's license number and other personal information.
problem types: Obtain Information
affected:
{
product: Lobby Track Desktop
vendor: Jolly Technologies
versions:
status: affected, version: 8.2.186
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 2.9
baseSeverity: LOW
confidentialityImpact: LOW
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: NONE
remediationLevel: UNAVAILABLE
reportConfidence: REASONABLE
scope: UNCHANGED
temporalScore: 2.6
temporalSeverity: LOW
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/A:N/PR:N/I:N/UI:N/S:U/C:L/AC:H/RC:R/E:U/RL:U
version: 3.0
]