CVE-2024-52054

Application Creation Path Traversal in Wowza Streaming Engine

CVSS 5.1 MEDIUMEPSS 0.7%CWE-22

Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to create an XML definition file anywhere on the file system.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected products

Wowza · Streaming Engine

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.rapid7.com/blog/post/2024/11/20/multiple-vulnerabilities-in-wowza-streaming-engine-fixed/https://www.wowza.com/docs/wowza-streaming-engine-4-9-1-release-notes