6 matches found
The vulnerability of the Wazuh API’s Agent Configuration component in the wazuh-dashboard platform, which is used for security monitoring and threat detection. This vulnerability allows attackers to obtain credentials for registering new agents.
The vulnerability of the Wazuh API’s Agent Configuration component in the wazuh-dashboard platform, which is used for security monitoring and threat detection, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to obtain credentials for...
CVE-2025-64483
CVE-2025-64483 affects Wazuh (4.9.0–before 4.13.0) via the Wazuh API – Agent Configuration endpoint. In certain configurations, authenticated users with read-only API roles could retrieve agent enrollment credentials through the /utils/configuration endpoint, enabling registration of new agents w...
CVE-2025-64483 Wazuh API – Agent Configuration Has Improper Access Control in Agent Enrollment Endpoint
Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the...
CVE-2025-64483 Wazuh API – Agent Configuration Has Improper Access Control in Agent Enrollment Endpoint
Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the...
