Wowza Streaming Engine 4.5.0 Cleartext Sensitive Information Storage

Discussion in 'News Aggregator' started by Packet Storm, 20 Jul 2016.

  1. Packet Storm

    Packet Storm Guest

    Wowza Streaming Engine version 4.5.0 build 18676 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. When the file is modified it is automatically applied into the application with newly created user account. Wowza stores sensitive information such as username and password in cleartext in admin.password file, which is readable by local users.

    Continue reading...
     

Share This Page

Loading...