Wind River Support Network

HomeDefectsLIN6-9942
Fixed

LIN6-9942 : Security Advisory - phpmyadmin - CVE-2015-3902

Created: May 31, 2015    Updated: Dec 3, 2018
Resolved Date: Jul 5, 2015
Found In Version: 6.0.0.20
Fix Version: 6.0.0.23
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configuration file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3902

Other Downloads


Live chat
Online