ZDI-24-097: Wazuh Log Collector Integer Underflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Wazuh. Log Injection is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.4. The following CVEs are assigned: CVE-2023-42463.

attack attackers attack vectors cve cves cvss escalation exploit implementation injection integer local local privilege escalation log may privilege privilege escalation privileges rating vulnerability wazuh zdi