PT-2019-9630 · Provisio · Provisio Sitekiosk

Published 2019-03-29 · Updated 2019-10-03 · CVE-2018-18766

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Provisio SiteKiosk versions prior to 9.7.4905

Description An elevation of privilege issue exists in the Call Dispatcher component.

Recommendations For versions prior to 9.7.4905, update to version 9.7.4905 or later to resolve the issue.

Fix

Related Identifiers

CVE-2018-18766

Affected Products

Provisio Sitekiosk

References · 3

• https://osv.dev/vulnerability/CVE-2018-18766 · Vendor Advisory
• https://provisio.com/en-US/Downloads/VersionHistory.aspx?Product=SiteKiosk · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18766 · Security Note