CVE-2016-2039: Infoleak
libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass intended access restrictions by predicting a value.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2039?
CVE-2016-2039 is classified as a medium severity vulnerability due to its ability to allow remote attackers to bypass access restrictions.
How do I fix CVE-2016-2039?
To fix CVE-2016-2039, update phpMyAdmin to versions 4.0.10.13 or later, 4.4.15.3 or later, or 4.5.4 or later.
What versions of phpMyAdmin are affected by CVE-2016-2039?
CVE-2016-2039 affects phpMyAdmin versions 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4.
What is the impact of CVE-2016-2039 on systems?
The impact of CVE-2016-2039 allows unauthorized access to sensitive functions by predicting CSRF token values.
Which systems are vulnerable to CVE-2016-2039?
Vulnerable systems include various versions of openSUSE and Fedora that run the affected versions of phpMyAdmin.