PT-2015-7818

CVE-2015-8669

·

Publicado

2014-05-05

·

Atualizado

2024-06-15

Descrição por

CVSS 3.1
5.3
Média
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.12 phpMyAdmin versions 4.4.x through 4.4.15.2 phpMyAdmin versions 4.5.x through 4.5.3.1
Description The issue allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message. This occurs in the libraries/config/messages.inc.php file.
Recommendations For phpMyAdmin versions 4.0.x through 4.0.10.12, update to version 4.0.10.12 or later. For phpMyAdmin versions 4.4.x through 4.4.15.2, update to version 4.4.15.2 or later. For phpMyAdmin versions 4.5.x through 4.5.3.1, update to version 4.5.3.1 or later.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
ALT-PU-2014-1591
MGASA-2016-0002
OPENSUSE-SU-2024:10054-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾