Wowza Streaming Engine 4.5.0 Cleartext Sensitive Information Storage
Posted by deepcore on July 21, 2016 – 4:44 am
Wowza Streaming Engine version 4.5.0 build 18676 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. When the file is modified it is automatically applied into the application with newly created user account. Wowza stores sensitive information such as username and password in cleartext in admin.password file, which is readable by local users.
Post a reply
You must be logged in to post a comment.