Unsafe comparison of XSRF/CSRF token.

🗓️ 24 Jan 2016 00:00:00Reported by phpMyAdminType

phpmyadmin🔗 www.phpmyadmin.net👁 30 Views

Unsafe comparison of XSRF/CSRF token. Vulnerable to timing attacks, token bypass. Serious. Affects v4.0.x, v4.4.x, v4.5.x. Upgrade to specified versions or apply patch

Reporter	Title	Published	Views	Family All 48
FreeBSD	phpmyadmin -- Unsafe comparison of XSRF/CSRF token	28 Jan 201600:00	–	freebsd
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.13 / 4.4.x < 4.4.15.3 / 4.5.x < 4.5.4 Multiple Vulnerabilities (PMASA-2016-1 - PMASA-2016-5)	2 Mar 201600:00	–	nessus
Tenable Nessus	Debian DLA-406-1 : phpmyadmin security update	1 Feb 201600:00	–	nessus
Tenable Nessus	Debian DLA-481-2 : phpmyadmin regression update	19 May 201600:00	–	nessus
Tenable Nessus	Debian DSA-3627-1 : phpmyadmin - security update	25 Jul 201600:00	–	nessus
Tenable Nessus	Fedora 22 : phpMyAdmin-4.5.4-1.fc22 (2016-e1fe01e96e)	4 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 23 : phpMyAdmin-4.5.4.1-1.fc23 (2016-e55278763e)	4 Mar 201600:00	–	nessus
Tenable Nessus	FreeBSD : phpmyadmin -- Unsafe comparison of XSRF/CSRF token (71b24d99-c60b-11e5-bf36-6805ca0b3d42)	29 Jan 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-151)	8 Feb 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin 4.4.15.4 (openSUSE-2016-168)	9 Feb 201600:00	–	nessus

Vulners

Node

phpmyadmin phpmyadminRange4.0.0–4.0.10.13

phpmyadmin phpmyadminRange4.4.0–4.4.15.3

phpmyadmin phpmyadminRange4.5.0–4.5.4

24 Jan 2016 00:00Current

7High risk

Vulners AI Score7

CVSS 25

CVSS 37.5

EPSS0.01029