CVE-2021-31540

HIGH · CVSS 7.1 EPSS 0.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-04-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-31540

Severity

HIGH

CVSS

7.1

EPSS

0.39%

Original NVD Description

Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the conf/ directory. A regular local user is able to read and write to all the configuration files, e.g., modify the application server configuration.