phpMyAdmin CVE-2016-6629 Security Bypass Vulnerability

Bugtraq ID:	92493
Class:	Design Error
CVE:	CVE-2016-6629
Remote:	Yes
Local:	No
Published:	Jul 25 2016 12:00AM
Updated:	Oct 03 2016 03:02AM
Credit:	Emanuel Bronshtein
Vulnerable:	Typo3 phpMyAdmin 5.1.6 Typo3 phpMyAdmin 5.1.5 Typo3 phpMyAdmin 5.1.4 Typo3 phpMyAdmin 4.11.9 Typo3 phpMyAdmin 4.11.8 Typo3 phpMyAdmin 4.11.5 Typo3 phpMyAdmin 4.11.4 Typo3 phpMyAdmin 4.11.2 Typo3 phpMyAdmin 4.11.1 Typo3 phpMyAdmin 4.11 Typo3 phpMyAdmin 4.10.3 Typo3 phpMyAdmin 4.9 Typo3 phpMyAdmin 4.8.1 Typo3 phpMyAdmin 4.5 Typo3 phpMyAdmin 4.3 Typo3 phpMyAdmin 4.2 Typo3 phpMyAdmin 4.1.1 Typo3 phpMyAdmin 4.1 Typo3 phpMyAdmin 3.4 Typo3 phpMyAdmin 3.3 Typo3 phpMyAdmin 3.2 Typo3 phpMyAdmin 3.0.1 Typo3 phpMyAdmin 3.0 Typo3 phpMyAdmin 0.2.2 phpMyAdmin phpMyAdmin 4.6.2 phpMyAdmin phpMyAdmin 4.6.1 phpMyAdmin phpMyAdmin 4.6 phpMyAdmin phpMyAdmin 4.4.15 phpMyAdmin phpMyAdmin 4.4.13 phpMyAdmin phpMyAdmin 4.4.12 phpMyAdmin phpMyAdmin 4.4.11 phpMyAdmin phpMyAdmin 4.4.10 phpMyAdmin phpMyAdmin 4.4.1 phpMyAdmin phpMyAdmin 4.4 phpMyAdmin phpMyAdmin 4.0.1 phpMyAdmin phpMyAdmin 4.0 phpMyAdmin phpMyAdmin 4.6.3 phpMyAdmin phpMyAdmin 4.4.15.7 phpMyAdmin phpMyAdmin 4.4.15.6 phpMyAdmin phpMyAdmin 4.4.15.5 phpMyAdmin phpMyAdmin 4.4.15.4 phpMyAdmin phpMyAdmin 4.4.15.3 phpMyAdmin phpMyAdmin 4.4.15.2 phpMyAdmin phpMyAdmin 4.4.15.1 phpMyAdmin phpMyAdmin 4.4.14.1 phpMyAdmin phpMyAdmin 4.4.14 phpMyAdmin phpMyAdmin 4.4.13.1 phpMyAdmin phpMyAdmin 4.4.1.1 phpMyAdmin phpMyAdmin 4.0.10.9 phpMyAdmin phpMyAdmin 4.0.10.8 phpMyAdmin phpMyAdmin 4.0.10.7 phpMyAdmin phpMyAdmin 4.0.10.6 phpMyAdmin phpMyAdmin 4.0.10.5 phpMyAdmin phpMyAdmin 4.0.10.4 phpMyAdmin phpMyAdmin 4.0.10.3 phpMyAdmin phpMyAdmin 4.0.10.2 phpMyAdmin phpMyAdmin 4.0.10.16 phpMyAdmin phpMyAdmin 4.0.10.15 phpMyAdmin phpMyAdmin 4.0.10.14 phpMyAdmin phpMyAdmin 4.0.10.13 phpMyAdmin phpMyAdmin 4.0.10.12 phpMyAdmin phpMyAdmin 4.0.10.11 phpMyAdmin phpMyAdmin 4.0.10.10 phpMyAdmin phpMyAdmin 4.0.10.1 phpMyAdmin phpMyAdmin 4.0.10
Not Vulnerable:	Typo3 phpMyAdmin 5.1.7 phpMyAdmin phpMyAdmin 4.6.4 phpMyAdmin phpMyAdmin 4.4.15.8 phpMyAdmin phpMyAdmin 4.0.10.17

phpMyAdmin CVE-2016-6629 Security Bypass Vulnerability

phpMyAdmin is prone to a security bypass vulnerability.

An attacker can exploit this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks.

phpMyAdmin CVE-2016-6629 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

phpMyAdmin CVE-2016-6629 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

phpMyAdmin CVE-2016-6629 Security Bypass Vulnerability

References:

• phpMyAdmin Homepage (phpMyAdmin)
  
• TYPO3-EXT-SA-2016-025: Multiple vulnerabilities in extension 'phpMyAdmin' (phpmy (TYPO3)
  
• PMASA-2016-52: ArbitraryServerRegexp bypass (phpmyadmin)