8.4
CVE-2018-17495
- EPSS 0.05%
- Veröffentlicht 21.03.2019 16:00:25
- Zuletzt bearbeitet 21.11.2024 03:54:32
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LogineVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prompt.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Thresholdsecurity ≫ Evisitorpass Version1.5.5.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.111 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
| psirt@us.ibm.com | 8.4 | 2.5 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|