CVE-2016-5730: Infoleak
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving (1) an array value to FormDisplay.php, (2) incorrect data to validate.php, (3) unexpected data to Validator.php, (4) a missing config directory during setup, or (5) an incorrect OpenID identifier data type, which reveals the full path in an error message.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5730?
CVE-2016-5730 is rated as medium severity due to its potential to expose sensitive information.
How do I fix CVE-2016-5730?
To fix CVE-2016-5730, upgrade to phpMyAdmin versions 4.0.10.16, 4.4.15.7, or 4.6.3 or later.
What versions of phpMyAdmin are affected by CVE-2016-5730?
CVE-2016-5730 affects phpMyAdmin versions 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3.
What vulnerabilities are associated with CVE-2016-5730?
CVE-2016-5730 allows remote attackers to obtain sensitive information due to improper handling of certain data inputs.
Is there a workaround for CVE-2016-5730?
Currently, the best approach for CVE-2016-5730 is to update to the latest versions as there are no recommended workarounds.