Updated phpmyadmin package fix CVE-2014-6300

2014-09-2212:31:24

Gentoo Foundation

advisories.mageia.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.4%

JSON

Updated phpmyadmin package fixes security vulnerability: In phpMyAdmin before 4.1.14.4, by deceiving a logged-in user to click on a crafted URL, it is possible to perform remote code execution and in some cases, create a root account due to a DOM based XSS vulnerability in the micro history feature (CVE-2014-6300).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchphpmyadmin< 4.1.14.4-1phpmyadmin-4.1.14.4-1.mga3
Mageia4noarchphpmyadmin< 4.1.14.4-1phpmyadmin-4.1.14.4-1.mga4