CVE-2016-2562
01.03.2016, 11:59
The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate.Enginsight
| Vendor | Product | Version |
|---|---|---|
| phpmyadmin | phpmyadmin | 4.5.0 |
| phpmyadmin | phpmyadmin | 4.5.0:beta1 |
| phpmyadmin | phpmyadmin | 4.5.0:beta2 |
| phpmyadmin | phpmyadmin | 4.5.0:rc1 |
| phpmyadmin | phpmyadmin | 4.5.0.1 |
| phpmyadmin | phpmyadmin | 4.5.0.2 |
| phpmyadmin | phpmyadmin | 4.5.1 |
| phpmyadmin | phpmyadmin | 4.5.2 |
| phpmyadmin | phpmyadmin | 4.5.3 |
| phpmyadmin | phpmyadmin | 4.5.3.1 |
| phpmyadmin | phpmyadmin | 4.5.4 |
| phpmyadmin | phpmyadmin | 4.5.4.1 |
| phpmyadmin | phpmyadmin | 4.5.5 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| phpmyadmin |
|
Common Weakness Enumeration
References