Kaspersky Anti Virus For Linux Server vulnerabilities

4 vulnerabilities

Known vulnerabilities in Kaspersky Anti Virus For Linux Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2017-9813kasperskyanti-virus_for_linux_server
EPSS score
2.62%
In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptName parameter of the licenseKeyInfo action method is vulnerable to cross-site scripting (XSS).7.5CVE-2017-9812kasperskyanti-virus_for_linux_server
EPSS score
11.27%
The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.8.8CVE-2017-9810kasperskyanti-virus_for_linux_server
EPSS score
1.93%
There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). This would allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.10CVE-2017-9811kasperskyanti-virus_for_linux_server
EPSS score
10.47%
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.