CVE-2019-19454
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming...
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0.
- Record
CVE-2019-19454- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0.
- Record
CVE-2019-19454- Updated
- 2026-11-02
EUVDEUVD-2019-9074 No score
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0.
- Record
EUVD-2019-9074- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wm4c-fv79-j3v9 No score
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming...
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x
- Record
GHSA-wm4c-fv79-j3v9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-19454 is a high vulnerability (CVSS 7.5) in Wowza Streaming Engine, published May 18, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.
References
wowza.com/docs/wowza-streaming-engine-4-8-0-release-notes
gruppotim.it/redteam
raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-19454.txt
nvd.nist.gov/vuln/detail/CVE-2019-19454
telecomitalia.com/it/innovazione/servizi-digitali/cybersecurity/red-team.html
github.com/advisories/GHSA-wm4c-fv79-j3v9