PT-2017-19422 · Php · Phpmyadmin

Publicado 2017-04-03 · Atualizado 2017-04-03

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions phpMyAdmin (affected versions not specified)

Description A vulnerability allows the restrictions caused by $cfg['Servers'][$i]['AllowNoPassword'] = false to be bypassed under certain PHP versions. This enables users without a password to log in, even if the administrator has set $cfg['Servers'][$i]['AllowNoPassword'] to false.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2017-0100

Produtos afetados

Phpmyadmin

Referências · 4

• https://bugs.mageia.org/show_bug.cgi?id=20600 · Nota
• https://advisories.mageia.org/MGASA-2017-0100.html · Nota de Segurança
• https://phpmyadmin.net/security/PMASA-2017-8 · Nota
• https://osv.dev/vulnerability/MGASA-2017-0100 · Aviso do Fabricante