PT-2014-6244 · Phpmyadmin+1 · Phpmyadmin+1

Marc Delisle · Publicado 2014-07-20 · Atualizado 2024-06-15 · CVE-2014-4987

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.1.x through 4.1.14.1 phpMyAdmin versions 4.2.x through 4.2.5

Description The issue allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request.

Recommendations For phpMyAdmin versions 4.1.x through 4.1.14.1, update to version 4.1.14.2 or later. For phpMyAdmin versions 4.2.x through 4.2.5, update to version 4.2.6 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2014-1963

CVE-2014-4987

MGASA-2014-0310

OPENSUSE-SU-2024:10054-1

Produtos afetados

Alt Linux

Phpmyadmin

Referências · 154

• https://github.com/phpmyadmin/phpmyadmin/commit/395265e9937beb21134626c01a21f44b28e712e5 · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/daa98d0c7ed24b529dc5df0d5905873acd0b00be · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/d4f754c937f9e2c0beadff5b2e38215dde1d6a79 · Nota
• https://cve.org/CVERecord?id=CVE-2014-4987 · Nota de Segurança
• https://suse.com/security/cve/CVE-2013-4995 · Nota
• http://phpmyadmin.net/home_page/security/PMASA-2014-5.php · Nota
• https://suse.com/security/cve/CVE-2014-4955 · Nota
• https://suse.com/security/cve/CVE-2016-6611 · Nota
• https://suse.com/security/cve/CVE-2016-6632 · Nota
• https://suse.com/security/cve/CVE-2016-6628 · Nota
• https://suse.com/security/cve/CVE-2016-6607 · Nota
• https://suse.com/security/cve/CVE-2016-2045 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6300 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-5274 · Nota
• https://suse.com/security/cve/CVE-2016-6624 · Nota