NetSight
IP …
medium5.3

CVE-2016-2039

libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, whi…

Impact

libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass intended access restrictions by predicting a value.

Affected products

VendorProductAffected versions
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
PhpmyadminPhpmyadmin
Versions 4.0.0, 4.0.1, 4.0.10, 4.0.10.1, 4.0.10.2, 4.0.10.3
FedoraprojectFedora
Versions 23, 24

Weakness classification

CWE-200

References