CVE-2025-15615 | BDVDB-2026-323291 Detail
Wazuhwazuh-manager
Description#
Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation requests. Attackers can exploit the lack of renegotiation limits to consume CPU resources and render the authd service unavailable.
Impact#
The Wazuh Manager authd service does not properly restrict client-initiated SSL/TLS renegotiation, which may allow remote attackers to cause a denial of service through CPU consumption by performing repeated renegotiations within a single connection.
Weaknesses#
- CWE-276 Incorrect Default Permissions
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.