Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the clearte…
Medium CVSS 6.5
Summary
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a masking control, mask_sensitive_config, that redacts sensitive fields such as authd.pass and cluster.key from configuration responses for users who lack update-config permission, and every config-read endpo…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://github.com/wazuh/wazuh/commit/1c55af25ebb160bddbde591efc19bb77b01282e7 Patch
- https://github.com/wazuh/wazuh/security/advisories/GHSA-chmg-89pf-2q82 Exploit
- https://github.com/wazuh/wazuh/security/advisories/GHSA-chmg-89pf-2q82 Exploit
Timeline
- nvd_ingest NVD