CVE-2024-3462
Authorization bypass in Ant Media Server
Résumé
Authorization bypass in Ant Media Server
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Ant Media Server Community Edition in a default configuration is vulnerable to an improper HTTP header based authorization, leading to a possible use of non-administrative API calls reserved only for authorized users.
All versions up to 2.9.0 (tested) and possibly newer ones are believed to be vulnerable as the vendor has not confirmed releasing a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory cert.pl
- advisory cert.pl
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web antmedia.io