Path Traversal vulnerability in Wowza Streaming Engine below 4.9.1
CVE-2024-52054

2.7LOW

Key Information:

Vendor

Wowza

Status
Streaming Engine
Vendor
CVE Published:
21 November 2024

What is CVE-2024-52054?

Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to create an XML definition file anywhere on the file system.

References

https://www.rapid7.com/blog/post/2024/11/20/multiple-vuln...
https://www.wowza.com/docs/wowza-streaming-engine-4-9-1-r...

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.