PT-2019-3742 · Phpmyadmin+4 · Phpmyadmin+4
Manuel García Cárdenas
·
Publicado
2019-05-18
·
Atualizado
2024-06-15
·
CVE-2019-12922
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
phpMyAdmin version 4.9.0.1
Description
The issue is related to a CSRF problem that can be exploited by a remote attacker to delete any server on the Setup page. This allows for unauthorized actions on the database management system.
Recommendations
For phpMyAdmin version 4.9.0.1, consider restricting access to the Setup page as a temporary workaround until a patch is available. Additionally, ensure that all users of the system are aware of the potential for unauthorized server deletion to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linuxmint
Suse
Ubuntu
Phpmyadmin