Lucene search
Ubuntu.comUB:CVE-2015-3903HistoryMay 26, 2015 - 12:00 a.m.
CVE-2015-3903
2015-05-2600:00:00
ubuntu.com
ubuntu.com
17
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.1%
libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x
before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disables
X.509 certificate verification for GitHub API calls over SSL, which allows
man-in-the-middle attackers to spoof servers and obtain sensitive
information via a crafted certificate.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 14.04 | noarch | phpmyadmin | < any | UNKNOWN |
| ubuntu | 15.04 | noarch | phpmyadmin | < 4:4.2.12-2+deb8u1build0.15.04.1 | UNKNOWN |
Related
securityvulns
securityvulns
phpMyAdmin 4.4.6 Man-In-the-Middle API Github
2015-05-18 00:00:00
debiancve
debiancve
CVE-2015-3903
2015-05-26 15:59:00
phpmyadmin
phpmyadmin
Vulnerability allowing man-in-the-middle attack on API call to GitHub.
2015-05-13 00:00:00
cve
cve
CVE-2015-3903
2015-05-26 15:59:00
prion
prion
Design/Logic Flaw
2015-05-26 15:59:00
nessus
nessus
phpMyAdmin 4.0.x < 4.0.10.10 / 4.2.x < 4.2.13.3 / 4.3.x < 4.3.13.1 / 4.4.x < 4.4.6.1 Multiple Vulnerabilities (PMASA-2015-2, PMASA-2015-3)
2020-11-27 00:00:00
mageia
mageia
Updated phpmyadmin packages fix security vulnerabilities
2015-05-18 22:08:05
freebsd
freebsd
phpMyAdmin -- XSRF and man-in-the-middle vulnerabilities
2015-05-13 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: phpMyAdmin-4.4.6.1-1.fc20
2015-05-17 06:44:09
[SECURITY] Fedora 21 Update: phpMyAdmin-4.4.6.1-1.fc21
2015-05-17 06:39:35
[SECURITY] Fedora 22 Update: phpMyAdmin-4.4.6.1-1.fc22
2015-05-26 03:43:49
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0232)
2022-01-28 00:00:00
Fedora Update for phpMyAdmin FEDORA-2015-8267
2015-06-09 00:00:00
phpMyAdmin Multiple Vulnerabilities -01 (Jun 2015)
2015-06-04 00:00:00
osv
osv
phpmyadmin - security update
2015-10-28 00:00:00
debian
debian
[SECURITY] [DSA 3382-1] phpmyadmin security update
2015-10-28 19:52:25
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.1%
Related for UB:CVE-2015-3903