Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-31540

Опубликовано: 23 апр. 2021
Источник: nvd
CVSS3: 7.1
CVSS2: 3.6
EPSS Низкий

Описание

Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the conf/ directory. A regular local user is able to read and write to all the configuration files, e.g., modify the application server configuration.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:wowza:streaming_engine:*:*:*:*:*:*:*:*
Версия до 4.8.5 (включая)

EPSS

Процентиль: 10%
0.00035
Низкий

7.1 High

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-732

Связанные уязвимости

github
больше 3 лет назад

Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the conf/ directory. A regular local user is able to read and write to all the configuration files, e.g., modify the application server configuration.

EPSS

Процентиль: 10%
0.00035
Низкий

7.1 High

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-732