Wazuh Manager Improper SSL/TLS Renegotiation Handling in authd Service Leading to Denial-of-Service
Vulnerability
A denial-of-service vulnerability has been identified in the Wazuh Manager authd service, affecting versions through 4.7.3. The issue arises from improper restrictions on client-initiated SSL/TLS renegotiation, allowing remote attackers to send excessive renegotiation requests. This exploitation can consume CPU resources, causing the authd service to become unavailable.
Impact
Exploitation of this vulnerability leads to increased CPU usage, causing the authd service to become unavailable.
Added: Mar 27, 2026, 4:23 PM
Updated: Mar 27, 2026, 4:23 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
4.8threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.