PT-2017-19422 · Php · Phpmyadmin

Published 2017-04-03 · Updated 2017-04-03

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions phpMyAdmin (affected versions not specified)

Description A vulnerability allows the restrictions caused by $cfg['Servers'][$i]['AllowNoPassword'] = false to be bypassed under certain PHP versions. This enables users without a password to log in, even if the administrator has set $cfg['Servers'][$i]['AllowNoPassword'] to false.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2017-0100

Affected Products

Phpmyadmin

References · 4

• https://advisories.mageia.org/MGASA-2017-0100.html · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0100 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=20600 · Note
• https://phpmyadmin.net/security/PMASA-2017-8 · Note