Test ID:	1.3.6.1.4.1.25623.1.0.108547
Category:	Default Accounts
Title:	Unprotected OSSEC/Wazuh ossec-authd (authd Protocol)
Summary:	The remote OSSEC/Wazuh ossec-authd service is not protected by; password authentication or client certificate verification.
Description:	Summary: The remote OSSEC/Wazuh ossec-authd service is not protected by password authentication or client certificate verification. Vulnerability Insight: It was possible to connect to the remote OSSEC/Wazuh ossec-authd service without providing a password or a valid client certificate. Vulnerability Impact: This issue may be misused by a remote attacker to register arbitrary agents at the remote service or overwrite the registration of existing ones taking them out of service. Solution: Enable password authentication or client certificate verification within the configuration of ossec-authd. Please see the manual of this service for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.