CVE-2024-52056: Application Delete Path Traversal in Wowza Streaming Engine
Published Nov 21, 2024
·Updated
Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to delete any directory on the file system if the target directory contains an XML definition file.
Affected Software
4 affected components
Wowza Streaming Engine<4.9.1
All of the following
Wowza Streaming Engine>=4.3.0<4.9.1
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Nov 21, 2024
CVE Published
via MITRE·10:59 PM
Data Sourced
via MITRE·10:59 PM
DescriptionWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-52056?
CVE-2024-52056 is considered a high severity vulnerability due to its potential to allow unauthorized directory deletions.
2
How do I fix CVE-2024-52056?
To fix CVE-2024-52056, upgrade Wowza Streaming Engine to version 4.9.1 or later.
3
Who is affected by CVE-2024-52056?
CVE-2024-52056 affects Wowza Streaming Engine versions below 4.9.1.
4
What kind of attack is enabled by CVE-2024-52056?
CVE-2024-52056 enables path traversal attacks that can lead to unauthorized deletion of directories.
5
Is the vulnerability CVE-2024-52056 remote exploitable?
Yes, CVE-2024-52056 can potentially be exploited remotely by an administrator user.