NVD

Id
20450  
Name
CVE-2016-5097  
Description
phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-07-04  
Modified Date
2016-07-14  
Seq
2016-5097  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111788 20450 CVE-2016-5097 openSUSE-SU-2016:1556  View
111789 20450 CVE-2016-5097 https://github.com/phpmyadmin/phpmyadmin/commit/11eb574242d2526107366d367ab5585fbe29578f  View
111790 20450 CVE-2016-5097 https://github.com/phpmyadmin/phpmyadmin/commit/59e56bd63a5e023b797d82eb272cd074e3b4bfd1  View
111791 20450 CVE-2016-5097 https://github.com/phpmyadmin/phpmyadmin/commit/5fc8020c5ba9cd2e38beb5dfe013faf2103cdf0f  View
111792 20450 CVE-2016-5097 https://github.com/phpmyadmin/phpmyadmin/commit/8326aaebe54083d9726e153abdd303a141fe5ad3  View
111793 20450 CVE-2016-5097 https://www.phpmyadmin.net/security/PMASA-2016-14  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2697 JVNDB-2016-003470 phpMyAdmin における重要な情報を取得される脆弱性 phpMyAdmin は、クエリ文字列にトークンをセットされ、外部のナビゲーションの前に当該トークンが取り除かれるよう準備しないため、重要な情報を取得される脆弱性が存在します。 CVE-2016-5097 91603 CVE-2016-5097 20450 5 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003470.html 2016-05-25 2016-07-11 View