CVE-2024-47770

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. This vulnerability occurs when the system has weak privilege access, that allows an...

CVE-2024-35177

CVE-2024-35177 affects the wazuh-agent for Windows, where an improper ACL on the non-default installation directory enables Local Privilege Escalation. A low-privileged user could drop a malicious DLL in the agent’s installation folder or replace the service executable, exploiting DLL search/load...

CVE-2024-35177 Improper Access Control in wazuh-agent

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. The wazuh-agent for Windows is vulnerable to a Local Privilege Escalation vulnerability...

CVE-2024-35177 Improper Access Control in wazuh-agent

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. The wazuh-agent for Windows is vulnerable to a Local Privilege Escalation vulnerability...

CVE-2024-35177 Improper Access Control in wazuh-agent

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. The wazuh-agent for Windows is vulnerable to a Local Privilege Escalation vulnerability...

CVE-2024-47770 Ability to view Agent list with no privilege access in wazuh-dashboard

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. This vulnerability occurs when the system has weak privilege access, that allows an...

CVE-2024-47770 Ability to view Agent list with no privilege access in wazuh-dashboard

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. This vulnerability occurs when the system has weak privilege access, that allows an...

CVE-2024-47770 Ability to view Agent list with no privilege access in wazuh-dashboard

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. This vulnerability occurs when the system has weak privilege access, that allows an...

CVE-2024-47770

Wazuh vulnerability CVE-2024-47770: a privilege escalation issue where an attacker can view the agent list on the Wazuh dashboard with no privileges. This impacts Wazuh deployments protecting workloads across on‑prem, virtualized, containerized, and cloud environments. Root cause: weak privilege ...

Wazuh 安全漏洞

Wazuh is a Wazuh open source application. It is used to collect, aggregate, index and analyze security data to help organizations detect intrusions, threats and behavioral anomalies. A security vulnerability exists in versions of Wazuh prior to 4.9.1, which stems from a privilege escalation that...

PT-2025-2436 · Wazuh +1 · Wazuh +1

Name of the Vulnerable Software and Affected Versions: Wazuh versions prior to 4.9.0 Description: The issue is related to improper access control in the Wazuh agent for Windows, allowing a local malicious user to potentially exploit this vulnerability by placing a specially crafted DLL file in th...

Wazuh 访问控制错误漏洞

Wazuh is a Wazuh open source application. It is used to collect, aggregate, index and analyze security data to help organizations detect intrusions, threats and behavioral anomalies. An Access Control Error vulnerability exists in Wazuh versions prior to 4.9.1, which stems from an incorrect ACL f...

PT-2025-2774 · Wazuh +1 · Wazuh +1

Name of the Vulnerable Software and Affected Versions: Wazuh versions prior to 4.9.1 Description: This issue occurs when the system has weak privilege access, allowing an attacker to perform privilege escalation. As a result, an attacker can view the agent list on the Wazuh dashboard without...

PT-2025-6749 · Wazuh · Wazuh Siem

Name of the Vulnerable Software and Affected Versions: Wazuh SIEM version 4.8.2 Description: This issue is related to a broken access control vulnerability, allowing the unauthorized creation of internal users without assigning any existing user role. This could potentially lead to privilege...

Leveraging Wazuh for Zero Trust security

Zero Trust security changes how organizations handle security by doing away with implicit trust while continuously analyzing and validating access requests. Contrary to perimeter-based security, users within an environment are not automatically trusted upon gaining access. Zero Trust security...

Achieve Security Compliance with Wazuh File Integrity Monitoring

File Integrity Monitoring FIM is an IT security control that monitors and detects file changes in computer systems. It helps organizations audit important files and system configurations by routinely scanning and verifying their integrity. Most information security standards mandate the use of FI...

The vulnerability of the cJSON_PrintUnformatted() function in the Wazuh-Analysis service of the Wazuh intrusion detection and prevention system allows a perpetrator to execute arbitrary code.

The vulnerability of the cJSONPrintUnformatted function in the Wazuh-Analysis service of the Wazuh intrusion detection and prevention system is related to the escape of the operation beyond the buffer in memory due to incorrect processing of XML files containing Unicode characters. Exploiting thi...

The vulnerability of the host_deny script in the Wazuh intrusion detection and prevention system allows a perpetrator to escalate their privileges and execute arbitrary commands.

The vulnerability of the hostdeny script in the Wazuh intrusion detection and prevention system is related to the lack of IP address checking for blocking incoming connections due to incorrect code generation. Exploiting this vulnerability allows a remote attacker to enhance their privileges and...

Wazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wazuh. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Analysis Engine service, which listens on TCP port 1514 by default. The issue results from the...

Wazuh Active Response Module Improper Input Validation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wazuh. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of IP address arguments. The issue results from the lack of proper validation of JSON...