CNNVD-202506-1568 Information
Jun 11, 2025
cve
CNNVD ID
CNNVD-202506-1568
Related CVE
- CNNVD Published: 2025-06-11
Description (Chinese)
Wazuh是Wazuh开源的一个应用软件。用于收集，汇总，索引和分析安全数据，帮助组织检测入侵，威胁和行为异常。 Wazuh 4.8.0之前版本存在安全漏洞，该漏洞源于输入验证不当，可能导致远程代码执行或权限提升。
Description (English)
Wazuh is an application from the Wazuh Open Source. For collection, aggregation, indexing and analysis of security data to help the organization detect invasions, threats and behavioural anomalies. There was a security loophole in the pre-Wazuh 4.8.0, which stemmed from inappropriate input validation, which could lead to remote code execution or enhanced privileges.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
Wazuh
Published
2025-06-11
Last Modified
2026-02-24
References
https://pentraze.com/vulnerability-reports/CVE-2024-1243/ https://github.com/wazuh/wazuh/security/advisories/GHSA-3crh-39qv-fxj7 https://nvd.nist.gov/vuln/detail/CVE-2024-1243
Patch
https://github.com/wazuh/wazuh/releases
Share on: