CVE-2015-4027

Published: Dec 17, 2015Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan.

Affected (1)

Products: Acunetix: Web Vulnerability Scanner

Acunetix

1 product

Web Vulnerability Scanner

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Acunetix Web Vulnerability Scanner	Up to 10

Related CWEs

CWE-264

References (6)

http://packetstormsecurity.com/files/134602/Acunetix-WVS-10-Local-Privilege-Escalation.html

Source: cve@mitre.org

Exploit

https://www.acunetix.com/blog/releases/acunetix-10-build-includes-security-checks-in-cors-configurations/

Source: cve@mitre.org

Vendor Advisory

https://www.exploit-db.com/exploits/38847/

Source: cve@mitre.org

Exploit

http://packetstormsecurity.com/files/134602/Acunetix-WVS-10-Local-Privilege-Escalation.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://www.acunetix.com/blog/releases/acunetix-10-build-includes-security-checks-in-cors-configurations/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.exploit-db.com/exploits/38847/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.