CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Information Exposure
Summary: the reportid parameter of the getreportstatus action method can be abused in the web interface in kaspersky anti-virus for linux file server before maintenance pack 2 critical fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-07-17
Last Modified Date: 2017-08-12
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Information Exposure.
user
CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Information Exposure
Summary: the reportid parameter of the getreportstatus action method can be abused in the web interface in kaspersky anti-virus for linux file server before maintenance pack 2 critical fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-07-17
Last Modified Date: 2017-08-12
assistant