CVE-2019-12922

Опубликовано: 13 сент. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 5.8

EPSS Средний

Описание

A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00078.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.html
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/154483/phpMyAdmin-4.9.0.1-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Sep/23
Exploit
Mailing List
Third Party Advisory
https://github.com/phpmyadmin/phpmyadmin/commit/427fbed55d3154d96ecfc1c7784d49eaa3c04161
Patch
Third Party Advisory
https://github.com/phpmyadmin/phpmyadmin/commit/7d21d4223bdbe0306593309132b4263d7087d13b
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBLBE6CSC2ZLINIRBUU5XBLXYVBTF3KA/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QJ5BW2VEMD2P23ZYRWHDBEQHOKGKGWD6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YCB3PTGHZ7AJCM6BKCQRRP6HG3OKYCMN/
https://www.exploit-db.com/exploits/47385
Exploit
Third Party Advisory
VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00078.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.html
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/154483/phpMyAdmin-4.9.0.1-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Sep/23
Exploit
Mailing List
Third Party Advisory
https://github.com/phpmyadmin/phpmyadmin/commit/427fbed55d3154d96ecfc1c7784d49eaa3c04161
Patch
Third Party Advisory
https://github.com/phpmyadmin/phpmyadmin/commit/7d21d4223bdbe0306593309132b4263d7087d13b
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBLBE6CSC2ZLINIRBUU5XBLXYVBTF3KA/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QJ5BW2VEMD2P23ZYRWHDBEQHOKGKGWD6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YCB3PTGHZ7AJCM6BKCQRRP6HG3OKYCMN/
https://www.exploit-db.com/exploits/47385
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*

Версия до 4.9.0.1 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.37137

Средний

6.5 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2019-12922

CVSS3: 6.5

ubuntu

почти 6 лет назад

A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

CVE-2019-12922

CVSS3: 6.5

debian

почти 6 лет назад

A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in th ...

openSUSE-SU-2019:2211-1

suse-cvrf

больше 5 лет назад

Security update for phpMyAdmin

GHSA-4c9q-64gq-xhx4

CVSS3: 6.5

github

около 3 лет назад

phpMyAdmin Cross-Site Request Forgery (CSRF)

BDU:2019-04000

CVSS3: 4.3

fstec

около 6 лет назад

Уязвимость веб-приложения для администрирования систем управления базами данных phpMyAdmin, связанная с подделкой межсайтовых запросов, позволяющая нарушителю удалить любой сервер на странице установки

EPSS

Процентиль: 97%

0.37137

Средний

6.5 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352