Back to Database
Status published
Critical
CVE-2018-7047
An issue was discovered in the MBeans Server in Wowza...
Vulnerability Description
An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials (remote code execution may be possible as well).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-7047
Credits & Attribution
No credits recorded in the NVD database.
References
More from wowza
View All →CVE-2021-35492
Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote...
Medium
6.5
CVE-2021-35491
A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine...
High
8.1
CVE-2021-31540
Wowza Streaming Engine through 4.8.5 (in a default installation) has...
High
7.1
CVE-2021-31539
Wowza Streaming Engine before 4.8.8.01 (in a default installation) has...
Medium
5.5
CVE-2020-9004
A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0...
High
8.8
Affected Vendor
wowza
View all reports →Affected Software
streaming engine
Vulnerable Versions:
0
Timeline
Official Publish:
March 1st, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.