| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin/phpmyadmin | ≥ 4.5, < 4.5.5.1 | 4.5.5.1 |
| phpmyadmin | = 4.5.0= 4.5.0.1= 4.5.0.2= 4.5.1= 4.5.2= 4.5.3= 4.5.3.1= 4.5.4= 4.5.4.1= 4.5.5 |
The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free