CVE-2016-5098: Path Traversal
Published Jul 5, 2016
·Updated
Directory traversal vulnerability in libraries/errorreport.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.
Affected Software
2 affected components
phpMyAdmin phpMyAdmin=4.6.2
openSUSE openSUSE=13.1
Remediation
Patch Available
Event History
Jul 5, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5098?
CVE-2016-5098 has a medium severity rating as it allows remote attackers to gain information about the server's file structure.
2
How do I fix CVE-2016-5098?
To mitigate CVE-2016-5098, upgrade phpMyAdmin to version 4.6.2 or later.
3
What types of systems are affected by CVE-2016-5098?
CVE-2016-5098 affects phpMyAdmin versions prior to 4.6.2 and the openSUSE operating system version 13.1.
4
What can attackers achieve with CVE-2016-5098?
Attackers can exploit CVE-2016-5098 to determine the existence of arbitrary files on the server.
5
When was CVE-2016-5098 published?
CVE-2016-5098 was published in June 2016.