9.1
CVE-2013-4454
- EPSS 0.63%
- Veröffentlicht 18.02.2020 14:15:12
- Zuletzt bearbeitet 21.11.2024 01:55:36
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginPortable phpMyAdmin <= 1.4.1 - Information Disclosure
WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities
Mögliche Gegenmaßnahme
Portable phpMyAdmin: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
Portable phpMyAdmin
Version
*-1.4.1
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Getbutterfly ≫ Portable-phpmyadmin Version1.4.1 SwPlatformwordpress
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.63% | 0.695 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.