Skip to content
OpenAdvisories

Product · wazuh

Wazuh Provisioning Scripts (Agent Build Environment)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2025-15612

    Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE

    Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercep…

    wazuh Wazuh Provisioning Scripts (Agent Build Environment)