CVE-2024-47770

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. This vulnerability occurs when the system has weak privilege access, that allows an attacker to do privilege escalation. In this case the attacker is able to view agent list on Wazuh dashboard with no privilege access. This issue has been addressed in release version 4.9.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Feb 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-477717.0Element Desktop is a Matrix client for desktop platforms. Element Desktop versions 1.11.70 through 1.11.80 contain a vulnerability which can CVE-2024-477726.1Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by sending a CVE-2024-477738.2Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a CVE-2024-477749.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_su CVE-2024-477759.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 func CVE-2024-477769.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk withi CVE-2024-477779.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavpar CVE-2024-477787.5GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_a CVE-2024-477797.0Element is a Matrix web client built using the Matrix React SDK. Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which CVE-2024-47789.8Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort so CVE-2024-477804.3TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access i CVE-2024-477816.1CreateWiki is an extension used at Miraheze for requesting & creating wikis. The name of requested wikis is not escaped on Special:RequestWi