Vulnerabilities > Wowza > Streaming Engine > High

DATE CVE VULNERABILITY TITLE RISK
2020-08-03 CVE-2019-19455 Incorrect Permission Assignment for Critical Resource vulnerability in Wowza Streaming Engine
Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / WowzaStreamingEngine / manager / bin / in the Linux version of the server by writing arbitrary commands in any file and execute them as root.
local
low complexity
wowza CWE-732
7.2
2020-01-29 CVE-2019-7656 Incorrect Permission Assignment for Critical Resource vulnerability in Wowza Streaming Engine
A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges to root.
local
low complexity
wowza CWE-732
7.2
2018-03-01 CVE-2018-7047 Use of Hard-coded Credentials vulnerability in Wowza Streaming Engine
An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1.
network
low complexity
wowza CWE-798
7.5