Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2024-52052

Stream Target Remote Code Execution in Wowza Streaming Engine

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Wowza Streaming Engine below 4.9.1 permits an authenticated Streaming Engine Manager administrator to define a custom application property and poison a stream target for high-privilege remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wowza Streaming Engine

Default version status: unaffected

  • 4.3.0 to < 4.9.1affected

References