CVE-2025-64483

creationtimestamp| type| source ---|---|--- 2025-11-21 20:07:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m663ixm4hr2n...

CVE-2025-64483 Wazuh API – Agent Configuration Has Improper Access Control in Agent Enrollment Endpoint

Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the...