CVE-2016-20035

CVE-2016-20035 identifies a Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine 4.5.0, enabling attackers to trick logged-in administrators into creating new administrative accounts with arbitrary credentials. This vulnerability is rated Medium severity (CVSS 4.3), requiring user interaction from an administrator visiting a malicious web page, but with low attack complexity. While it allows for unauthorized account creation, there is no evidence of active exploitation, public exploit code, or significant community attention, suggesting a very low probability of exploitation.