Security Advisory

CVE-2015-4027

7.2

Vulnerability Description

The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan.
Published Date December 17, 2015
Official Source NIST NVD Advisory