Wowza Streaming Engine 4.5.0 Local Privilege Escalation via nssm_x64.exe

Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by replacing executable files due to improper file permissions granting full access to the Everyone group. Attackers can replace the nssm_x64.exe binary in the manager and engine service directories with malicious executables to execute code with LocalSystem privileges when services restart.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

通过用户控制密钥绕过授权机制

Wowza Media Systems Wowza Streaming Engine 安全漏洞

Wowza Media Systems Wowza Streaming Engine是美国Wowza Media Systems公司的一个强大的、可定制的和可扩展的媒体服务器软件。用于将高质量视频和音频可靠地流式传输到任何地方的任何设备。 Wowza Media Systems Wowza Streaming Engine 4.5.0版本存在安全漏洞，该漏洞源于文件权限设置不当，可能导致经过身份验证的用户通过替换可执行文件提升权限。

N/A

N/A