CVE-2016-2039

Published Feb 20, 2016 CVSS 3.0 · 5.3 Medium EPSS 2.5% KEV · Not listed
Description
libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass intended access restrictions by predicting a value.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-406-1 phpmyadmin security update
Debian DLA Debian DLA DLA-481-1 phpmyadmin security update
Debian DLA Debian DLA DLA-481-2 phpmyadmin regression update
Debian DSA Debian DSA DSA-3627-1 phpmyadmin security update
EUVD EUVD EUVD-2016-3147 libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass intended access restrictions by predicting a value.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 11:17 PM
Reserved
Jan 22, 2016, 12:00 AM
Status
Modified
Published
Feb 20, 2016, 1:59 AM
Modified
Jun 17, 2026, 12:43 AM