4

CVE-2014-4987

server_user_groups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request.

Data is provided by the National Vulnerability Database (NVD)
OpensuseOpensuse Version12.3
OpensuseOpensuse Version13.1
PhpmyadminPhpmyadmin Version4.1.0
PhpmyadminPhpmyadmin Version4.1.1
PhpmyadminPhpmyadmin Version4.1.2
PhpmyadminPhpmyadmin Version4.1.3
PhpmyadminPhpmyadmin Version4.1.4
PhpmyadminPhpmyadmin Version4.1.5
PhpmyadminPhpmyadmin Version4.1.6
PhpmyadminPhpmyadmin Version4.1.7
PhpmyadminPhpmyadmin Version4.1.8
PhpmyadminPhpmyadmin Version4.1.9
PhpmyadminPhpmyadmin Version4.1.10
PhpmyadminPhpmyadmin Version4.1.11
PhpmyadminPhpmyadmin Version4.1.12
PhpmyadminPhpmyadmin Version4.1.13
PhpmyadminPhpmyadmin Version4.1.14
PhpmyadminPhpmyadmin Version4.1.14.1
PhpmyadminPhpmyadmin Version4.2.0
PhpmyadminPhpmyadmin Version4.2.1
PhpmyadminPhpmyadmin Version4.2.2
PhpmyadminPhpmyadmin Version4.2.3
PhpmyadminPhpmyadmin Version4.2.4
PhpmyadminPhpmyadmin Version4.2.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.19% 0.414
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N