CVE-2024-52056

Published Nov 21, 2024

Last updated 3 months ago

CVSS medium 6.9

Overview

Description: Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to delete any directory on the file system if the target directory contains an XML definition file.
Source: cve@rapid7.com
NVD status: Received

Risk scores

CVSS 4.0

Type: Secondary
Base score: 6.9
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: MEDIUM

Weaknesses

cve@rapid7.com: CWE-22

Hype score: Not currently trending

CVE-2024-52056 Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to delete any directory on the file system if the target di… https://t.co/1TobMjLapP
@CVEnew
22 Nov 2024
364 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References