CVE-2022-40497

Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution RCE vulnerability via the Active Response endpoint...

CVE-2022-40497

CVE-2022-40497 affects Wazuh: versions 3.6.1–3.13.5, 4.0.0–4.2.7, and 4.3.0–4.3.7 are vulnerable to authenticated remote code execution via the Active Response endpoint. Root cause described across sources as insufficient filtering of the constructed code segment at the Active Response endpoint, ...

CVE-2022-40497

Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution RCE vulnerability via the Active Response endpoint...