Back to Database
Status published
Low
CVE-2018-17489
EasyLobby Solo could allow a local attacker to obtain sensitive...
Vulnerability Description
EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext. By visiting the kiosk and viewing the Visitor table of the database, an attacker could exploit this vulnerability to view stored social security numbers.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17489
Credits & Attribution
No credits recorded in the NVD database.
More from HID Global
View All →CVE-2024-23806
HID Global Reader Configuration Cards Improper Authorization
Medium
5.3
CVE-2024-22388
Insecure Default Initialization of Resource in HID Global
Medium
5.9
CVE-2023-2904
CVE-2023-2904
Unknown
0
CVE-2021-47859
ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path
High
8.5
CVE-2018-17492
EasyLobby Solo contains default administrative credentials. An attacker could exploit...
High
8.4
Affected Vendor
HID Global
View all reports →Affected Software
EasyLobby Solo
Vulnerable Versions:
11.0.4563
Timeline
Official Publish:
March 19th, 2019
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/S:U/UI:N/I:N/A:N/PR:N/AV:L/C:L/AC:H/E:U/RL:O/RC:C
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.