En bref
- CVE-2016-2562 est une vulnérabilité MOYENNE (CVSS 6.8) touchant phpmyadmin/phpmyadmin, phpmyadmin (phpmyadmin).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.78%, plus élevée que 55.9% des vulnérabilités.
- Correctif : mettre à jour vers 4.5.5.1 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| phpmyadmin/phpmyadmin Packagist | ≥ 4.5, < 4.5.5.1
| 4.5.5.1
|
| phpmyadmin | = 4.5.0= 4.5.0.1= 4.5.0.2= 4.5.1= 4.5.2= 4.5.3= 4.5.3.1= 4.5.4= 4.5.4.1= 4.5.5
| No fix yet |
Description
The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate.
NVD description
The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate.
Autres vulnérabilités de phpmyadmin/phpmyadmin
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free