CVE-2020-9004

A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue requests to the…

published April 14, 2020

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue requests to the administration panel in order to change functionality. For example, a read-only user may activate the Java JMX port in unauthenticated mode and execute OS commands under root privileges. This issue was resolved in Wowza Streaming Engine 4.8.5.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03531 · 89.2th percentile
Published
2020-04-14T14:50Z
EPSS history
Timeline
  • 14 APR 14:50Z
    A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue requests to the…
    cvelistv5