CVE-2025-54866 in Wazuh
Zusammenfassung
von MITRE • 21.11.2025
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.3.0 to before 4.13.0, a missing ACL on "C:\Program Files (x86)\ossec-agent\authd.pass" exposes the password to all "Authenticated Users" on the local machine. This issue has been patched in version 4.13.0.
If you want to get best quality of vulnerability data, you may have to visit VulDB.