CVE Daily

CVE-2015-4027

The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) befor...

High CVSS 7.2

Overview

The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan.

CWE: CWE-264 Published: 2015-12-17T19:59:00.087
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.2 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags