CVE-2024-52055

Published Nov 21, 2024

Last updated 3 months ago

Overview

Description: Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to read any file on the file system if the target directory contains an XML definition file.
Source: cve@rapid7.com
NVD status: Received

Risk scores

CVSS 4.0

Type: Secondary
Base score: 8.2
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

Weaknesses

cve@rapid7.com: CWE-22

Hype score: Not currently trending

CVE-2024-52055 Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to read any file on the file system if the target directory… https://t.co/64bQl3erS1
@CVEnew
22 Nov 2024
366 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References