CVE-2019-19455: High severity wowza streaming engine vulnerability
Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / WowzaStreamingEngine / manager / bin / in the Linux version of the server by writing arbitrary commands in any file and execute them as root. This issue was resolved in Wowza Streaming Engine 4.8.5.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19455?
CVE-2019-19455 is a vulnerability in Wowza Streaming Engine before version 4.8.5 that allows a local attacker to escalate privileges by writing arbitrary commands in any file and executing them as root.
What is the severity of CVE-2019-19455?
CVE-2019-19455 has a severity score of 7.8, which is considered high.
How can a local attacker exploit CVE-2019-19455?
A local attacker can exploit CVE-2019-19455 by writing arbitrary commands in any file in the Linux version of Wowza Streaming Engine and executing them as root.
How can I fix CVE-2019-19455?
To fix CVE-2019-19455, upgrade Wowza Streaming Engine to version 4.8.5 or higher.
Where can I find more information about CVE-2019-19455?
You can find more information about CVE-2019-19455 in the official release notes of Wowza Streaming Engine 4.8.5 and the provided references.