CVE-2021-35491

Description

References

• n4nj0.github.io/advisories/wowza-streaming-engine-i · Third Party Advisory
• gruppotim.it/redteam · Exploit
• wowza.com/docs/wowza-streaming-engine-4-8-14-release-notes · Release Notes

More vulnerabilities in streaming engine

• CVE-2016-20036MEDIUM 6.1Wowza Streaming Engine 4.5.0 contains multiple reflected cross-site scripting vulnerabilities in the enginemanager interface where input pas…
• CVE-2016-20035MEDIUM 4.3Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by …
• CVE-2016-20034HIGH 8.0Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to elevate privileges t…
• CVE-2016-20033HIGH 7.8Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by r…
• CVE-2024-52056MEDIUM 6.5Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to delete any directory on the fi…