Directory traversal

2014-11-3011:59:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

51.5%

JSON

Directory traversal vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to obtain potentially sensitive information about a file’s line count via a crafted parameter.

CPENameOperatorVersion
opensuseeq12.3
opensuseeq13.1
opensuseeq13.2
phpmyadmineq4.1.14.1
phpmyadmineq4.1.2
phpmyadmineq4.2.1
phpmyadmineq4.1.8
phpmyadmineq4.1.10
phpmyadmineq4.2.10.1
phpmyadmineq4.1.5

Name	Operator	Version
opensuse	eq	12.3
opensuse	eq	13.1
opensuse	eq	13.2
phpmyadmin	eq	4.1.14.1
phpmyadmin	eq	4.1.2
phpmyadmin	eq	4.2.1
phpmyadmin	eq	4.1.8
phpmyadmin	eq	4.1.10
phpmyadmin	eq	4.2.10.1
phpmyadmin	eq	4.1.5