VulnerabilityDeferred

CVE-2024-57378

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability.

HIGH 7.3EPSS 0.27%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.27%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources.

CVSS 3.1: 7.3 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS: 0.27% probability · 19th percentile
CISA KEV: Not listed
Weakness: CWE-284
Source: cve@mitre.org

References

https://github.com/bappe-sarker/Vulnerability-Research/tree/main/CVE-2024-57378

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.