Wind River Support Network

HomeDefectsLIN8-4173

Fixed

LIN8-4173 : Security Advisory - phpmyadmin - CVE-2016-5097

Created: Jul 14, 2016 Updated: Dec 3, 2018

Resolved Date: Aug 11, 2016

Found In Version: 8.0

Fix Version: 8.0.0.9

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5097

Other Downloads

CVEs

CVE-2016-5097