Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33858
HistoryJan 24, 2022 - 4:38 a.m.

Authentication Bypass

2022-01-2404:38:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
phpmyadmin
authentication bypass
databaseinterface.php
two-factor authentication

EPSS

0.001

Percentile

22.7%

phpmyadmin/phpmyadmin is vulnerable to authentication bypass. The vulnerability exists in initRelationParamsCache() function in DatabaseInterface.php allowing an authenticated attacker to bypass two-factor authentication for future login instances.