Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-36r3-mw6j-7ffc

Опубликовано: 27 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.8

Описание

Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation requests. Attackers can exploit the lack of renegotiation limits to consume CPU resources and render the authd service unavailable.

Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation requests. Attackers can exploit the lack of renegotiation limits to consume CPU resources and render the authd service unavailable.

EPSS

Процентиль: 42%
0.00497
Низкий

6.9 Medium

CVSS4

5.8 Medium

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 5.8
nvd
6 месяцев назад

Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation requests. Attackers can exploit the lack of renegotiation limits to consume CPU resources and render the authd service unavailable.

EPSS

Процентиль: 42%
0.00497
Низкий

6.9 Medium

CVSS4

5.8 Medium

CVSS3

Дефекты

CWE-276