PT-2014-8763 · Phpmyadmin+1 · Phpmyadmin+1

Madhura Jayaratne · Publicado 2014-11-25 · Atualizado 2024-06-15 · CVE-2014-8961

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.1.x through 4.1.14.6 phpMyAdmin versions 4.2.x through 4.2.11

Description A directory traversal issue exists in the error-reporting feature, allowing remote authenticated users to obtain potentially sensitive information about a file's line count via a crafted parameter.

Recommendations For phpMyAdmin versions 4.1.x through 4.1.14.6, update to version 4.1.14.7 or later. For phpMyAdmin versions 4.2.x through 4.2.11, update to version 4.2.12 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

ALT-PU-2014-2385

CVE-2014-8961

MGASA-2014-0495

OPENSUSE-SU-2024:10054-1

Produtos afetados

Alt Linux

Phpmyadmin

Referências · 153

• https://github.com/phpmyadmin/phpmyadmin/commit/9364e2eee5681681caf7205c0933bc18af11e233 · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/80cd40b6687a6717860d345d6eb55bef2908e961 · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/b99b6b6672ff2419f05b05740c80c7a23c1da994 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-4995 · Nota
• https://suse.com/security/cve/CVE-2014-4955 · Nota
• https://suse.com/security/cve/CVE-2016-6611 · Nota
• https://suse.com/security/cve/CVE-2016-6632 · Nota
• https://suse.com/security/cve/CVE-2016-6628 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8961 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-6607 · Nota
• https://suse.com/security/cve/CVE-2016-2045 · Nota
• https://suse.com/security/cve/CVE-2014-5274 · Nota
• https://suse.com/security/cve/CVE-2016-6624 · Nota
• https://suse.com/security/cve/CVE-2014-4954 · Nota
• https://suse.com/security/cve/CVE-2016-2043 · Nota