CVE-2025-15615

MEDIUM

5.8

Descripcion

Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation requests. Attackers can exploit the lack of renegotiation limits to consume CPU resources and render the authd service unavailable.

Detalles CVE

Puntuacion CVSS v3.15.8

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado3/27/2026

Ultima modificacion3/27/2026

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-276

Referencias

https://github.com/wazuh/wazuh/security/advisories/GHSA-rr83-v9v7-jjhp(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/ssl-tls-renegotiation-dos-in-wazuh-manager-authd-service(disclosure@vulncheck.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.