NVD

Id
9452  
Name
CVE-2011-2719  
Description
libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-08-01  
Modified Date
2011-10-25  
Seq
2011-2719  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54005 9452 CVE-2011-2719 FEDORA-2011-9725  View
54006 9452 CVE-2011-2719 FEDORA-2011-9734  View
54007 9452 CVE-2011-2719 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=571cdc6ff4bf375871b594f4e06f8ad3159d1754  View
54008 9452 CVE-2011-2719 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7  View
54009 9452 CVE-2011-2719 20110724 phpMyAdmin 3.x Conditional Session Manipulation  View
54010 9452 CVE-2011-2719 8322  View
54011 9452 CVE-2011-2719 DSA-2286  View
54012 9452 CVE-2011-2719 MDVSA-2011:124  View
54013 9452 CVE-2011-2719 [oss-security] 20110725 CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12  View
54014 9452 CVE-2011-2719 [oss-security] 20110726 Re: CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12  View
54015 9452 CVE-2011-2719 http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php  View
54016 9452 CVE-2011-2719 20110724 phpMyAdmin 3.x Conditional Session Manipulation  View
54017 9452 CVE-2011-2719 20110804 Re: [Full-disclosure] phpMyAdmin 3.x Conditional Session Manipulation  View
54018 9452 CVE-2011-2719 48874  View
54019 9452 CVE-2011-2719 http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt  View
54020 9452 CVE-2011-2719 phpmyadmin-swekey-file-overwrite(68769)  View
54021 9452 CVE-2011-2719 https://bugzilla.redhat.com/show_bug.cgi?id=725384  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34549 JVNDB-2011-004791 phpMyAdmin の libraries/auth/swekey/swekey.auth.lib.php における SESSION スーパーグローバル配列を変更される脆弱性 phpMyAdmin の libraries/auth/swekey/swekey.auth.lib.php は、Swekey 認証に関連したセッションを適切に管理 しないため、SESSION スーパーグローバル配列、その他のスーパーグローバル配列、および特定の swekey.auth.lib.php ローカル変数を変更される脆弱性が存在します。 CVE-2011-2719 50626 CVE-2011-2719 9452 6.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004791.html 2011-07-23 2012-03-27 View