CVE-2017-9812: Infoleak
The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9812?
CVE-2017-9812 is classified as a high severity vulnerability due to its ability to read arbitrary files with kluser privileges.
How do I fix CVE-2017-9812?
To fix CVE-2017-9812, upgrade Kaspersky Anti-Virus for Linux File Server to version 8.0.4.312 or later.
What is affected by CVE-2017-9812?
CVE-2017-9812 affects Kaspersky Anti-Virus for Linux File Server versions up to and including 8.0.3.297.
What parameters are involved in CVE-2017-9812?
The vulnerability is associated with the reportId parameter of the getReportStatus action method.
What type of attack can be executed through CVE-2017-9812?
CVE-2017-9812 can be exploited to perform unauthorized file reading operations through a web interface.