Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Access to forbidden agents information when exporting agents list #2900

Closed
s-ocando opened this issue Feb 2, 2021 · 0 comments
Closed

Access to forbidden agents information when exporting agents list #2900

s-ocando opened this issue Feb 2, 2021 · 0 comments
Assignees
@pablomarga
Labels
type/bug Bug issue
Milestone
Sprint 124 - WUI

Comments

@s-ocando
Copy link
Contributor

s-ocando commented Feb 2, 2021

Wazuh Elastic Rev
4.1.0 7.10.0 4101-1

Description

A user can get information about all the available agents, including unauthorized ones, when exporting the agents' list.

In this example, the user is authorized to read agent 005, and it can be observed that when exporting the agents' list it also includes information about agent 006.

output
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@pablomarga pablomarga

Labels
type/bug Bug issue
Projects
None yet
Milestone
Sprint 124 - WUI
Development

No branches or pull requests
3 participants
@frankeros @pablomarga @s-ocando