CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Information Exposure
Summary: the reportid parameter of the getreportstatus action method can be abused in the web interface in kaspersky anti-virus for linux file server before maintenance pack 2 critical fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-07-17
Last Modified Date: 2017-08-12