Privilege Escalation in Wazuh Platform by Vulnerability in Access Control

CVE-2024-47770

What is CVE-2024-47770?

A significant vulnerability has been identified in the Wazuh platform, which is widely utilized for threat prevention, detection, and response across diverse environments. This vulnerability arises from inadequate privilege restrictions, enabling an attacker to escalate their access rights. As a result, users may find that an attacker is able to view sensitive information, such as the agent list on the Wazuh dashboard, without requiring appropriate permissions. The issue has been remediated in version 4.9.1, and users are strongly urged to upgrade to safeguard their systems, as there are currently no known workarounds to mitigate this risk.

References