CVE-2022-23807
An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate th...
Original description
The description as published by the source.
An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
phpmyadmin
[{"type":"SEMVER","events":[{"introduced":"4.9.0"},{"fixed":"4.9.8"},{"introduced":"5.1.0"},{"fixed":"5.1.2"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-23807 phpmyadmin
- Ubuntu UBUNTU-CVE-2022-23807 phpmyadmin
References
- advisory phpmyadmin.net
- web security.gentoo.org
- web nvd.nist.gov