CVE-2022-23807

An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate th...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami phpmyadmin

[{"type":"SEMVER","events":[{"introduced":"4.9.0"},{"fixed":"4.9.8"},{"introduced":"5.1.0"},{"fixed":"5.1.2"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2022-23807 phpmyadmin
Ubuntu UBUNTU-CVE-2022-23807 phpmyadmin

Références

advisory phpmyadmin.net
web security.gentoo.org
web nvd.nist.gov