Unscored CVE-2021-31539 EUVD-2021-18437GHSA-8r89-3g9f-5g2p

Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password file. A regula…

Published Apr 23, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password file. A regular local user is able to read usernames and passwords.

References

https://www.wowza.com/products/streaming-engine
https://www.gruppotim.it/redteam
https://www.wowza.com/docs/wowza-streaming-engine-4-8-8-01-release-notes#breaking