CVE-2021-31539: Wowza Streaming Engine

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password file. A regular local user is able to read usernames and passwords.

Affected products

• Wowza Streaming Engine: before 4.8.8.01 (fixed in 4.8.8.01)

Published 2021-04-23. Last modified 2026-06-17.