CVE-2016-20035 | BDVDB-2026-320585 Detail

Description#

Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages. Attackers can trick logged-in administrators into visiting a malicious site that submits POST requests to the user edit endpoint to create new admin accounts with arbitrary credentials.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-03-15Record published in the CVE List.
2. Version 22026-03-16Most recent update recorded in the CVE List.