Flussonic Media Server Multiple Security Vulnerabilities

  1. Network Vulnerabilities
  2. Web application abuses
  3. Flussonic Media Server Multiple Security Vulnerabilities
Summary
Flussonic Media Server 4.3.3 Multiple Vulnerabilities
Impact
It's possible to read any files/directories from the server (with the application's user's permissions) by a simple HTTP GET request.
Solution
Update to Flussonic Media Server 4.3.4
Insight
Flussonic Media Server is prone to a: 1. Arbitrary File Read (Unauthenticated) 2. Arbitrary Directory Listing (Authenticated)
Affected
Flussonic Media Server 4.3.3
Detection
Send a HTTP GET request and check the response
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities