An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials (remote code execution may be possible as well).
| CVE | CVE-2018-7047 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 2.3% en 30 días (percentil 83) |
| CWE | CWE-798 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Productos afectados (catálogo NVD)
wowza/streaming_engine
Técnica MITRE ATT&CK
T1552.001 – Unsecured Credentials: Credentials In Files
Mapeo automático best-effort por clase de vulnerabilidad (CWE) -- orientación, no certificación.