Beveiligingsadvies

CVE-2011-2719

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-08-01 19:00:00
Laatst bijgewerkt 2024-08-06 23:08:23
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.