CVE-2024-57378

high

Description

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources.

References

https://github.com/rxerium/CVE-2024-57378

https://github.com/bappe-sarker/Vulnerability-Research

https://github.com/bappe-sarker/Vulnerability-Research/tree/main/CVE-2024-57378

Details

Source: Mitre, NVD

Published: 2025-02-13

Updated: 2026-04-15

Risk Information

CVSS v2

Base Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Severity: High

EPSS

EPSS: 0.00064