CVE-2021-31539

EPSS 0.3%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

23 Apr 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password file. A regular local user is able to read usernames and passwords.

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.gruppotim.it/redteam https://www.wowza.com/docs/wowza-streaming-engine-4-8-8-01-release-notes#breaking https://www.wowza.com/products/streaming-engine