CVE-2016-2562

🗓️ 01 Mar 2016 00:00:00Reported by ubuntu.comType

The checkHTTP function in phpMyAdmin 4.5.x before 4.5.5.1 allows man-in-the-middle attacks via crafted SSL certificates

Reporter	Title	Published	Views	Family All 25
Prion	Design/Logic Flaw	1 Mar 201611:59	–	prion
CVE	CVE-2016-2562	1 Mar 201611:59	–	cve
Debian CVE	CVE-2016-2562	1 Mar 201611:59	–	debiancve
NVD	CVE-2016-2562	1 Mar 201611:59	–	nvd
phpMyAdmin	Vulnerability allowing man-in-the-middle attack on API call to GitHub.	25 Feb 201600:00	–	phpmyadmin
Cvelist	CVE-2016-2562	1 Mar 201611:00	–	cvelist
OSV	phpMyAdmin Improper Input Validation	17 May 202203:31	–	osv
OSV	phpMyAdmin-4.6.5.2-1.1 on GA media	15 Jun 202400:00	–	osv
Github Security Blog	phpMyAdmin Improper Input Validation	17 May 202203:31	–	github
Tenable Nessus	phpMyAdmin 4.5.x < 4.5.5.1 Multiple Vulnerabilities (PMASA-2016-10, PMASA-2016-13)	17 Jun 201600:00	–	nessus

Source	Link
phpmyadmin	www.phpmyadmin.net/security/PMASA-2016-13/
github	www.github.com/phpmyadmin/phpmyadmin/commit/e42b7e3aedd29dd0f7a48575f20bfc5aca0ff976
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-2562
launchpad	www.launchpad.net/bugs/cve/CVE-2016-2562
security-tracker	www.security-tracker.debian.org/tracker/CVE-2016-2562

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	14.04	noarch	phpmyadmin	any	UNKNOWN
ubuntu	16.04	noarch	phpmyadmin	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Mar 2016 00:00Current

4.3Medium risk

Vulners AI Score4.3

CVSS25.8

CVSS36.8

EPSS0.001