CVEvulnerability
CVE-2018-7047
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-03-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-798
Description
An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials (remote code execution may be possible as well).
Affected configurations
• wowza streaming engine (< 4.7.1)
Related
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness
References
- https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2018-7047.txt raw.githubusercontent.com
- https://www.wowza.com/docs/wowza-streaming-engine-4-7-1-release-notes Release Notes, Vendor Advisory
- https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2018-7047.txt raw.githubusercontent.com
- https://www.wowza.com/docs/wowza-streaming-engine-4-7-1-release-notes Release Notes, Vendor Advisory