En resumen
- CVE-2016-2562 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a phpmyadmin/phpmyadmin, phpmyadmin (phpmyadmin).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.78%, mayor que el 55.9% de las vulnerabilidades.
- Solución: actualizar a 4.5.5.1 o posterior.
| Package | Affected versions | Patched versions |
|---|
| phpmyadmin/phpmyadmin Packagist | ≥ 4.5, < 4.5.5.1
| 4.5.5.1
|
| phpmyadmin | = 4.5.0= 4.5.0.1= 4.5.0.2= 4.5.1= 4.5.2= 4.5.3= 4.5.3.1= 4.5.4= 4.5.4.1= 4.5.5
| No fix yet |
Description
The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate.
NVD description
The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate.
Más vulnerabilidades de phpmyadmin/phpmyadmin
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free