Skip to content

Commit 7d415ca

Browse files
remove enrollment.password from configuration endpoint
Prevents exposure of agent enrollment credentials in API responses to enhance security and avoid unauthorized agent registration by users with read-only API roles.
1 parent 997c258 commit 7d415ca

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@ All notable changes to the Wazuh app project will be documented in this file.
2626
- Removed `Inventory data` view from agent overview [#7368](https://github.com/wazuh/wazuh-dashboard-plugins/pull/7368)
2727
- Removed `GET /api/syscollector` API endpoint [#7368](https://github.com/wazuh/wazuh-dashboard-plugins/pull/7368)
2828
- Removed inventory data report and `POST /reports/agents/{agentID}/inventory` API endpoint [#7368](https://github.com/wazuh/wazuh-dashboard-plugins/pull/7368)
29+
- Removed the `enrollment.password` field from the `/utils/configuration` endpoint response to prevent unauthorized agent registration by users with read-only API roles. [#7455](https://github.com/wazuh/wazuh-dashboard-plugins/pull/7455)
2930

3031
### Fixed
3132

0 commit comments

Comments
 (0)