CVE-2024-3462: Ant Media Server Community Edition

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Ant Media Server Community Edition in a default configuration is vulnerable to an improper HTTP header based authorization, leading to a possible use of non-administrative API calls reserved only for authorized users.  All versions up to 2.9.0 (tested) and possibly newer ones are believed to be vulnerable as the vendor has not confirmed releasing a patch.

Affected products

• Ant Media Ant Media Server Community Edition: up to and including 2.9.0

Published 2024-05-14. Last modified 2026-06-17.