Insecure Permissions in Wowza Streaming Engine Affects Local Security

CVE-2019-19455

What is CVE-2019-19455?

Wowza Streaming Engine prior to version 4.8.5 contains a vulnerability due to insecure permissions which can be exploited by a local attacker. This weakness allows the attacker to craft arbitrary files with commands that may be executed with root privileges, potentially compromising system security. The vulnerability impacts the /usr/local/WowzaStreamingEngine/manager/bin directory in the Linux version of the software. It is crucial for administrators using affected versions to upgrade to 4.8.5 or later to mitigate this security risk.

References