4.3

CVE-2015-3903

Exploit
libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disables X.509 certificate verification for GitHub API calls over SSL, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyadmin ≫ Phpmyadmin Version 4.0.0
Phpmyadmin ≫ Phpmyadmin Version 4.0.0 Update rc2
Phpmyadmin ≫ Phpmyadmin Version 4.0.0 Update rc3
Phpmyadmin ≫ Phpmyadmin Version 4.0.1
Phpmyadmin ≫ Phpmyadmin Version 4.0.2
Phpmyadmin ≫ Phpmyadmin Version 4.0.3
Phpmyadmin ≫ Phpmyadmin Version 4.0.4
Phpmyadmin ≫ Phpmyadmin Version 4.0.4.1
Phpmyadmin ≫ Phpmyadmin Version 4.0.4.2
Phpmyadmin ≫ Phpmyadmin Version 4.0.5
Phpmyadmin ≫ Phpmyadmin Version 4.0.6
Phpmyadmin ≫ Phpmyadmin Version 4.0.7
Phpmyadmin ≫ Phpmyadmin Version 4.0.8
Phpmyadmin ≫ Phpmyadmin Version 4.0.9
Phpmyadmin ≫ Phpmyadmin Version 4.0.10
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.2
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.5
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.6
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.7
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.8
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.9
Phpmyadmin ≫ Phpmyadmin Version 4.2.0
Phpmyadmin ≫ Phpmyadmin Version 4.2.1
Phpmyadmin ≫ Phpmyadmin Version 4.2.2
Phpmyadmin ≫ Phpmyadmin Version 4.2.3
Phpmyadmin ≫ Phpmyadmin Version 4.2.4
Phpmyadmin ≫ Phpmyadmin Version 4.2.5
Phpmyadmin ≫ Phpmyadmin Version 4.2.7
Phpmyadmin ≫ Phpmyadmin Version 4.2.7.1
Phpmyadmin ≫ Phpmyadmin Version 4.2.9.1
Phpmyadmin ≫ Phpmyadmin Version 4.2.10.1
Phpmyadmin ≫ Phpmyadmin Version 4.2.11
Phpmyadmin ≫ Phpmyadmin Version 4.2.12
Phpmyadmin ≫ Phpmyadmin Version 4.2.13.1
Phpmyadmin ≫ Phpmyadmin Version 4.2.13.2
Phpmyadmin ≫ Phpmyadmin Version 4.3.0
Phpmyadmin ≫ Phpmyadmin Version 4.3.1
Phpmyadmin ≫ Phpmyadmin Version 4.3.2
Phpmyadmin ≫ Phpmyadmin Version 4.3.3
Phpmyadmin ≫ Phpmyadmin Version 4.3.4
Phpmyadmin ≫ Phpmyadmin Version 4.3.5
Phpmyadmin ≫ Phpmyadmin Version 4.3.6
Phpmyadmin ≫ Phpmyadmin Version 4.3.7
Phpmyadmin ≫ Phpmyadmin Version 4.3.8
Phpmyadmin ≫ Phpmyadmin Version 4.3.9
Phpmyadmin ≫ Phpmyadmin Version 4.3.10
Phpmyadmin ≫ Phpmyadmin Version 4.3.11
Phpmyadmin ≫ Phpmyadmin Version 4.3.12
Phpmyadmin ≫ Phpmyadmin Version 4.3.13
Phpmyadmin ≫ Phpmyadmin Version 4.4.0
Phpmyadmin ≫ Phpmyadmin Version 4.4.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.1.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.3
Phpmyadmin ≫ Phpmyadmin Version 4.4.4
Phpmyadmin ≫ Phpmyadmin Version 4.4.5
Phpmyadmin ≫ Phpmyadmin Version 4.4.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.6% 0.727
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.debian.org/security/2015/dsa-3382
http://lists.opensuse.org/opensuse-updates/2015-07/msg00008.html
http://cxsecurity.com/issue/WLB-2015050095
Exploit
http://packetstormsecurity.com/files/131954/phpMyAdmin-4.4.6-Man-In-The-Middle.html
Exploit
http://www.phpmyadmin.net/home_page/security/PMASA-2015-3.php
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/535547/100/0/threaded
http://www.securityfocus.com/bid/74660
http://www.securitytracker.com/id/1032403
https://github.com/phpmyadmin/phpmyadmin/commit/5ebc4daf131dd3bd646326267f3e765d0249bbb4