Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Test design: Execution on console in AR scripts and escape special characters from JSON alert #2366

Open
damarisg opened this issue Dec 20, 2021 · 0 comments
Open

Test design: Execution on console in AR scripts and escape special characters from JSON alert #2366

damarisg opened this issue Dec 20, 2021 · 0 comments
Labels
feature/active-response new-development

Comments

@damarisg
Copy link
Member

damarisg commented Dec 20, 2021 •
edited
Loading

Description

This issue aims to design and create tests to cover the Active response tools allow arbitrary code execution bug.

It was a critical bug that opened us CVE-2021-44079 and, then Wazuh could fix it here.

Scenario: Execute by console a command and check that it not is executed as code. (check cases).

To Do

  • Research the issue.
  • Define TCs, also identify if they require IT or System tests.
  • Create TCs.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
feature/active-response new-development
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@damarisg @davidjiglesias