PhpMyAdmin exposure of sensitive information
CVE-2022-0813

7.5HIGH

Key Information:

Vendor
phpMyAdmin
Status
phpMyAdmin
Vendor
CVE Published:
10 March 2022

Summary

PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.

Affected Version(s)

phpMyAdmin 5.1.1

References

https://www.incibe-cert.es/en/early-warning/security-advi...
https://www.phpmyadmin.net/news/2022/2/11/phpmyadmin-4910...
https://security.gentoo.org/glsa/202311-17
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafael Pedrero
.