CWE Code: 668
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Exposure of Resource to Wrong Sphere
Summary: the norwegian air shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "please select booking identification" ui step, and obtain administrative privileges and network access on the underlying windows os, by accessing a touch-screen print icon to manipulate the print dialog.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-02-09
Last Modified Date: 2019-10-03