GHSA-MHXJ-6VF8-MWV3 phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention

🗓️ 17 May 2022 02:37:25Reported by GoogleType

osv

osv🔗 osv.dev👁 23 Views

phpMyAdmin improper IPv6 and proxy server IP-based authentication enforcement vulnerabilit

Reporter	Title	Published	Views	Family All 41
Tenable Nessus	phpMyAdmin 4.0.10.x < 4.0.10.17 / 4.4.15.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities	30 Aug 201600:00	–	nessus
Tenable Nessus	Debian DLA-1821-1 : phpmyadmin security update	18 Jun 201900:00	–	nessus
Tenable Nessus	Debian DLA-626-1 : phpmyadmin security update	19 Sep 201600:00	–	nessus
Tenable Nessus	FreeBSD : phpmyadmin -- multiple vulnerabilities (ef70b201-645d-11e6-9cdc-6805ca0b3d42)	18 Aug 201600:00	–	nessus
Tenable Nessus	GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities	12 Jan 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-1021)	30 Aug 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-1027)	30 Aug 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.17 / 4.4.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities (PMASA-2016-29 - PMASA-2016-56) (deprecated)	21 Nov 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.0 < 4.0.10.17 / 4.4.0 < 4.4.15.8 / 4.6.0 < 4.6.4 Multiple Vulnerabilities	30 Nov 202000:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-6624	25 Aug 202500:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-6624
github	www.github.com/phpmyadmin/composer
lists	www.lists.debian.org/debian-lts-announce/2019/06/msg00009.html
security	www.security.gentoo.org/glsa/201701-32
phpmyadmin	www.phpmyadmin.net/security/PMASA-2016-47
securityfocus	www.securityfocus.com/bid/92489

06 Dec 2024 05:43Current

7.2High risk

Vulners AI Score7.2

CVSS 35.9

EPSS0.02025

phpmyadmin ipv6 proxy server authentication vulnerability 4.6.x 4.4.x 4.0.x