CVE-2015-2206

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.8 phpMyAdmin versions 4.2.x through 4.2.13.1 phpMyAdmin versions 4.3.x through 4.3.11.0

Description The issue allows remote attackers to conduct a BREACH attack and determine the CSRF token via a series of crafted requests. This is due to invalid language values in unknown-language error responses that contain a CSRF token and may be sent with HTTP compression.

Recommendations For phpMyAdmin versions 4.0.x through 4.0.10.8, update to version 4.0.10.9 or later. For phpMyAdmin versions 4.2.x through 4.2.13.1, update to version 4.2.13.2 or later. For phpMyAdmin versions 4.3.x through 4.3.11.0, update to version 4.3.11.1 or later.