| Package | Affected versions | Patched versions |
|---|---|---|
| streaming engine | ≤ 4.8.0 |
A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue requests to the administration panel in order to change functionality. For example, a read-only user may activate the Java JMX port in unauthenticated mode and execute OS commands under root privileges. This issue was resolved in Wowza Streaming Engine 4.8.5.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free