CVE-2017-9812

PoC ×3—

CVSS 3.0

7.5 high

EPSS

11%p96

Published

Jul 17, 2017 (Jul 17, 2017)

Modified

Jun 17, 2026

Description

The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.

Vendors: kaspersky
Products: anti-virus for linux server
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (11.3%)

In the news0 stories

No ingested article mentions this CVE yet.