CVE-2017-18264 phpMyAdmin Improper Privilege Management
CriticalCVSS 9.8
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg['Servers'][$i]['AllowNoPassword'] = false are bypassed under certain PHP versions (e.g., version 5). This can allow the login of users who have no password set even if the administrator has set $cfg['Servers'][$i]['AllowNoPassword'] to false (which is also the default). This occurs because some implementations of the PHP substr function return false when given '' as the first argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyadmin/phpmyadmin(Packagist) | >= 4.0, < 4.0.10.20 | 4.0.10.20 |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.0 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.1 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10.1 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10.2 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10.3 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10.4 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10.5 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10.6 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10.7 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10.8 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.10.9 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.2 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.3 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.4 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.4.1 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.4.2 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.5 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.6 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.7 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.8 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | = 4.0.9 | No fix listed |
| phpmyadmin/phpmyadmin(Packagist) | >= 4.7.0-beta1, < 4.7.0 | 4.7.0 |
| phpmyadmin/phpmyadmin(Packagist) | >= 4.4.0, <= 4.4.15.10 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyadmin/phpmyadmin(Packagist) | >= 4.6.0, <= 4.6.6 | No fix listed |
| debian/phpmyadmin(Debian:12) | < 4:4.6.6-2 | 4:4.6.6-2 |
| debian/phpmyadmin(Debian:14) | < 4:4.6.6-2 | 4:4.6.6-2 |
| debian/phpmyadmin(Debian:13) | < 4:4.6.6-2 | 4:4.6.6-2 |
| phpmyadmin/phpmyadmin | >= 4.0.0, < 4.0.10.20 | 4.0.10.20 |
| phpmyadmin/phpmyadmin | >= 4.4.0, <= 4.4.15.10 | No fix listed |
| phpmyadmin/phpmyadmin | >= 4.6.0, <= 4.6.6 | No fix listed |
| phpmyadmin/phpmyadmin | = 4.7.0-beta1 | No fix listed |
| phpmyadmin/phpmyadmin | = 4.7.0-rc1 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- [debian-lts-announce] 20180706 [SECURITY] [DLA 1415-1] phpmyadmin security update mailing-list third-party-advisory
- www.phpmyadmin.net patch vendor-advisory
- 97211 third-party-advisory vdb-entry
- Debian Security Tracker CVE-2017-18264 vendor-advisory
- github.com