CVE-2016-20034 - Vulnerability Analysis

Overview

Wowza Streaming Engine 4.5.0 contains a privilege escalation caused by manipulation of POST parameters in the user edit endpoint, letting authenticated read-only users elevate privileges to administrator, exploit requires authentication.

Severity & Score

Impact

Authenticated users can escalate their privileges to administrator, compromising system integrity and control.

Mitigation

Update to the latest version of Wowza Streaming Engine.

References

• https://www.vulncheck.com/advisories/wowza-streaming-engine-privilege-escalation-via-user-edit
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5340.php
• https://www.exploit-db.com/exploits/40133

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner