VULNERABILITY INTELLIGENCE

CVE-2018-7047

CVSS score9.8 CRITICAL
EPSS probability2.31%
CISA KEVNot currently listed
Published2018-03-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials (remote code execution may be possible as well).

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references