CVE-2015-4027: High severity invicti acunetix vulnerability
Published Dec 17, 2015
·Updated
The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan.
Affected Software
1 affected component
Acunetix Web Vulnerability Scanner<=10
Event History
Dec 17, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4027?
CVE-2015-4027 is classified as a medium severity privilege escalation vulnerability.
2
How do I fix CVE-2015-4027?
To fix CVE-2015-4027, upgrade to Acunetix Web Vulnerability Scanner version 10 build 20151125 or later.
3
What is the impact of CVE-2015-4027?
CVE-2015-4027 allows local users to gain elevated privileges through a vulnerable command parameter.
4
Is CVE-2015-4027 exploitable remotely?
CVE-2015-4027 is not remotely exploitable as it requires local user access to exploit.
5
Which versions of Acunetix Web Vulnerability Scanner are affected by CVE-2015-4027?
All versions of Acunetix Web Vulnerability Scanner prior to version 10 build 20151125 are affected by CVE-2015-4027.