Lucene search

K
mageiaGentoo FoundationMGASA-2015-0366
HistorySep 14, 2015 - 12:58 a.m.

Updated phpmyadmin packages fix CVE-2015-6830

2015-09-1400:58:30
Gentoo Foundation
advisories.mageia.org
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.2%

Updated phpmyadmin package fixes security vulnerability: In phpMyAdmin before 4.3.13.2 and 4.4.14.1, installations with reCaptcha enabled allow completing the reCaptcha test and subsequently performing a brute force attack to guess user credentials without having to complete further reCaptcha tests (CVE-2015-6830).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchphpmyadmin< 4.2.13.3-1.1phpmyadmin-4.2.13.3-1.1.mga4
Mageia5noarchphpmyadmin< 4.2.13.3-1.1phpmyadmin-4.2.13.3-1.1.mga5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.2%