CVE-2024-52055: Application Copy Path Traversal in Wowza Streaming Engine
Published Nov 21, 2024
·Updated
Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to read any file on the file system if the target directory contains an XML definition file.
Affected Software
4 affected components
Wowza Streaming Engine<4.9.1
All of the following
Wowza Streaming Engine>=4.3.0<4.9.1
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Nov 21, 2024
CVE Published
via MITRE·10:54 PM
Data Sourced
via MITRE·10:54 PM
DescriptionWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-52055?
CVE-2024-52055 is considered a high severity vulnerability due to its potential to allow unauthorized access to sensitive files.
2
How do I fix CVE-2024-52055?
To fix CVE-2024-52055, upgrade Wowza Streaming Engine to version 4.9.1 or later.
3
What is the impact of CVE-2024-52055 on affected systems?
CVE-2024-52055 allows an administrator user to read any file on the file system, compromising data privacy and security.
4
Who is affected by CVE-2024-52055?
Users of Wowza Streaming Engine versions prior to 4.9.1 are affected by CVE-2024-52055.
5
Does CVE-2024-52055 require authentication to exploit?
Yes, CVE-2024-52055 requires an authenticated administrator user to exploit the vulnerability.