high8.8
CVE-2022-40497
Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Acti…
Impact
Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wazuh | Wazuh | from 3.6.1 through 3.13.5 from 4.0.0 through 4.2.7 from 4.3.0 through 4.3.7 |