PT-2011-2794

CVE-2011-0986

Publicado

2011-02-14

Atualizado

2022-05-17

Descrição por

CVSS 2.0

5.0

Média

MétricasAV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 2.11.x through 2.11.11.1 phpMyAdmin versions 3.3.x through 3.3.9.0

Description The issue arises from improper handling of missing files, specifically the README, ChangeLog, and LICENSE files. This allows remote attackers to determine the installation path by requesting a nonexistent file.

Recommendations For phpMyAdmin versions 2.11.x through 2.11.11.1, update to version 2.11.11.2 to resolve the issue. For phpMyAdmin versions 3.3.x through 3.3.9.0, update to version 3.3.9.1 to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Mustlive

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

CWE-20: Improper Input Validation

Identificadores relacionados

CVE-2011-0986