Wowza Streaming Engine XXE lets remote attackers read local files
Streaming servers can let strangers peek at files on the server.
Summary
Wowza Streaming Engine processes XML external entities, letting remote attackers read local files with the privileges of the Wowza Streaming Engine process. Versions before 4.12.2 are affected.
What to do
Update to 4.12.2.
Products and platforms
CVE IDs
Sources
- Advisory: wowza.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen