Lucene search

K
mageiaGentoo FoundationMGASA-2015-0232
HistoryMay 18, 2015 - 10:08 p.m.

Updated phpmyadmin packages fix security vulnerabilities

2015-05-1822:08:05
Gentoo Foundation
advisories.mageia.org
10

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.7%

Updated phpmyadmin package fixes security vulnerabilities: In phpMyAdmin before 4.2.13.3, by deceiving a user to click on a crafted URL, it is possible to alter the configuration file being generated with phpMyAdmin setup (CVE-2015-3902). In phpMyAdmin before 4.2.13.3, a vulnerability in the API call to GitHub can be exploited to perform a man-in-the-middle attack (CVE-2015-3903). With this update, the phpmyadmin package has been updated to the 4.2 branch, which has some additional changes and new features. The 4.1 branch is no longer supported.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchphpmyadmin< 4.2.13.3-1phpmyadmin-4.2.13.3-1.mga4

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.7%