CVE-2021-26814: Path Traversal

Q: What is the severity of CVE-2021-26814?

CVE-2021-26814 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution with administrative privileges.

Q: How do I fix CVE-2021-26814?

To fix CVE-2021-26814, upgrade your Wazuh installation to version 4.0.4 or later.

Q: Who is affected by CVE-2021-26814?

CVE-2021-26814 affects authenticated users of Wazuh versions 4.0.0 to 4.0.3.

Q: What type of attack is possible with CVE-2021-26814?

CVE-2021-26814 allows for arbitrary code execution via incomplete input validation on the /manager/files API.

Q: Can CVE-2021-26814 be exploited remotely?

Yes, CVE-2021-26814 can be exploited by authenticated users to execute code remotely.

Published Mar 6, 2021

Updated

Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service script.

Affected Software

1 affected component

Wazuh Wazuh>=4.0.0<=4.0.3

Event History

Mar 6, 2021

CVE Published

via MITRE·01:24 AM

Data Sourced

via MITRE·01:24 AM

Description

Frequently Asked Questions

What is the severity of CVE-2021-26814?

CVE-2021-26814 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution with administrative privileges.

How do I fix CVE-2021-26814?

To fix CVE-2021-26814, upgrade your Wazuh installation to version 4.0.4 or later.

Who is affected by CVE-2021-26814?

CVE-2021-26814 affects authenticated users of Wazuh versions 4.0.0 to 4.0.3.

What type of attack is possible with CVE-2021-26814?

CVE-2021-26814 allows for arbitrary code execution via incomplete input validation on the /manager/files API.

Can CVE-2021-26814 be exploited remotely?