Lucene search
GoogleOSV:GHSA-567R-VQJ7-5CW7HistoryMay 17, 2022 - 2:37 a.m.
phpMyAdmin Authentication Bypass
2022-05-1702:37:14
Google
osv.dev
10
phpmyadmin
authentication bypass
arbitraryserverregexp
cookie
security issue
versionaffected
software
EPSS
0.004
Percentile
72.6%
An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by ArbitraryServerRegexp. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Related
osv
osv
CVE-2016-6629
2016-12-11 02:59:00
phpMyAdmin-4.6.5.2-1.1 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2016-6629
2016-12-11 02:00:00
alpinelinux
alpinelinux
CVE-2016-6629
2016-12-11 02:59:38
github
github
phpMyAdmin Authentication Bypass
2022-05-17 02:37:14
phpmyadmin
phpmyadmin
ArbitraryServerRegexp bypass
2016-07-25 00:00:00
debiancve
debiancve
CVE-2016-6629
2016-12-11 02:59:38
nvd
nvd
CVE-2016-6629
2016-12-11 02:59:38
ubuntucve
ubuntucve
CVE-2016-6629
2016-12-11 00:00:00
prion
prion
Default configuration
2016-12-11 02:59:00
cve
cve
CVE-2016-6629
2016-12-11 02:59:38
openvas
openvas
phpMyAdmin Multiple Security Vulnerabilities - 02 (Dec 2016) - Windows
2017-04-10 00:00:00
phpMyAdmin Multiple Security Vulnerabilities - 02 (Dec 2016) - Linux
2017-04-10 00:00:00
Mageia: Security Advisory (MGASA-2016-0291)
2022-01-28 00:00:00
mageia
mageia
Updated phpmyadmin packages fix security vulnerability
2016-08-31 18:32:33
nessus
nessus
freebsd
freebsd
phpmyadmin -- multiple vulnerabilities
2016-08-17 00:00:00
suse
suse
Security update for phpMyAdmin (important)
2016-08-29 11:09:35
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2017-01-11 00:00:00