CVE-2022-23807
An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate th...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
phpmyadmin
[{"type":"SEMVER","events":[{"introduced":"4.9.0"},{"fixed":"4.9.8"},{"introduced":"5.1.0"},{"fixed":"5.1.2"}]}]
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2022-23807 phpmyadmin
- Ubuntu UBUNTU-CVE-2022-23807 phpmyadmin
参照URL
- advisory phpmyadmin.net
- web security.gentoo.org
- web nvd.nist.gov