CVE-2019-19455

Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / WowzaStreamingEngine / manager / bin / in the Linux version of the server by writing arbitrary commands in any file and execute them as root. This issue was resolved in Wowza Streaming Engine 4.8.5.

• CWE-732

• https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-19455.txtThird Party Advisory
• https://www.gruppotim.it/redteamThird Party Advisory
• https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notesRelease Notes, Vendor Advisory
• https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-19455.txtThird Party Advisory
• https://www.gruppotim.it/redteamThird Party Advisory
• https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notesRelease Notes, Vendor Advisory

Published

Aug 3, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1945Multiple vulnerabilities in the smart tunnel functionality o…6.7
• CVE-2019-19450paraparser in ReportLab before 3.5.31 allows remote code exe…9.8
• CVE-2019-19451When GNOME Dia before 2019-11-27 is launched with a filename…5.5
• CVE-2019-19452A buffer overflow was found in Patriot Viper RGB through 1.1…7.8
• CVE-2019-19453Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2…5.4
• CVE-2019-19454An arbitrary file download was found in the "Download Log" f…7.5
• CVE-2019-19456A Reflected XSS was found in the server selection box inside…6.1
• CVE-2019-19457SALTO ProAccess SPACE 5.4.3.0 allows XSS.5.4
• CVE-2019-19458SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in …8.6
• CVE-2019-19459An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An…9.8
• CVE-2019-1946A vulnerability in the web-based management interface of Cis…6.5
• CVE-2019-19460An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. Th…5.5