description: Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By using attack vectors outlined in kiosk breakout, an attacker could exploit this vulnerability to view and edit the database.
problem types: Obtain Information
affected:
{
product: Lobby Track Desktop
vendor: Jolly Technologies
versions:
status: affected, version: 8.2.186
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: LOW
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: NONE
remediationLevel: UNAVAILABLE
reportConfidence: REASONABLE
scope: UNCHANGED
temporalScore: 3.5
temporalSeverity: LOW
userInteraction: NONE
vectorString: CVSS:3.0/I:L/AV:L/A:N/PR:N/UI:N/S:U/AC:H/C:L/RC:R/E:U/RL:U
version: 3.0
]