phpMyAdmin Local file exposure through symlinks with UploadDir
Summary
CVE-2016-6613: phpMyAdmin Local file exposure through symlinks with UploadDir. Affects phpmyadmin/phpmyadmin across 3 version ranges.
>= 4.0, < 4.0.10.17
>= 4.4, < 4.4.15.8
>= 4.6, < 4.6.4
Fixed in 4.0.10.17, 4.4.15.8 or 4.6.4, depending on the release line you run. How to fix ↓
Also tracked for
- phpmyadmin · Alpine:v3.2
The same CVE-2016-6613 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a popular open-source tool for managing MySQL databases. It provides a web-based interface that allows users to perform various database management tasks such as creating, modifying, and deleting databases, tables, and records. The tool is widely used by developers, database administrators, and website owners to interact with their MySQL databases. However, a vulnerability has been discovered in phpMyAdmin that allows an attacker to expose sensitive files on the server by exploiting symlinks with the UploadDir feature.
Vulnerability Detail
The vulnerability in phpMyAdmin allows an attacker to create a symlink on the server to a file that phpMyAdmin is permitted to read but the user is not. This symlink can be used to expose the file to the attacker, potentially leading to unauthorized access to sensitive information. The vulnerability affects all versions of phpMyAdmin 4.6.x (prior to 4.6.4), 4.4.x (prior to 4.4.15.8), and 4.0.x (prior to 4.0.10.17). The vulnerability has a CVSS score of 5.3, indicating a moderate severity level.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.0, < 4.0.10.174.0.10.17composer require phpmyadmin/phpmyadmin:4.0.10.17 -
>= 4.4, < 4.4.15.84.4.15.8composer require phpmyadmin/phpmyadmin:4.4.15.8 -
>= 4.6, < 4.6.44.6.4composer require phpmyadmin/phpmyadmin:4.6.4
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If updating phpMyAdmin is not immediately possible, users can implement a workaround by disabling the UploadDir feature. This can be done by modifying the phpMyAdmin configuration file and commenting out or removing the 'UploadDir' directive. However, this workaround may limit the functionality of phpMyAdmin, particularly for tasks that require file uploads.
Conclusion
The vulnerability in phpMyAdmin that allows local file exposure through symlinks with UploadDir can be mitigated by updating to the latest version of phpMyAdmin or by disabling the UploadDir feature. It is recommended to apply the necessary updates as soon as possible to prevent potential unauthorized access to sensitive information. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for phpmyadmin/phpmyadmin →
FAQ
phpMyAdmin is an open-source tool for managing MySQL databases. It provides a web-based interface for performing various database management tasks.
The vulnerability affects all versions of phpMyAdmin 4.6.x (prior to 4.6.4), 4.4.x (prior to 4.4.15.8), and 4.0.x (prior to 4.0.10.17).
The vulnerability allows an attacker to expose sensitive files on the server, potentially leading to unauthorized access to sensitive information.
To fix this vulnerability, update your phpMyAdmin installation to version 4.6.4, 4.4.15.8, or 4.0.10.17. Alternatively, you can disable the UploadDir feature as a temporary workaround.
Disabling the UploadDir feature may limit the functionality of phpMyAdmin, particularly for tasks that require file uploads.
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin/phpmyadmin.
