Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2021-43008 →

DEBIAN-CVE-2021-43008

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote s...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 adminer

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.3-1"}]}]

Debian:13 adminer

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.3-1"}]}]

Debian:14 adminer

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.3-1"}]}]

Références

advisory security-tracker.debian.org