phpMyAdmin Improper Authentication Vulnerability in phpmyadmin/phpmyadmin
Summary
CVE-2018-12613: phpMyAdmin Improper Authentication. Affects phpmyadmin/phpmyadmin versions >= 4.8, < 4.8.2. Fixed in 4.8.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a popular open-source tool written in PHP that is used for managing MySQL and MariaDB databases. It provides a web-based interface for performing various database management tasks such as creating, editing, and deleting databases, tables, and queries. The vulnerability in phpMyAdmin allows an attacker to include and potentially execute files on the server. This vulnerability exists in versions 4.8.x before 4.8.2. The issue arises from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. While an attacker must be authenticated to exploit this vulnerability, there are certain cases where authentication can be bypassed, allowing arbitrary code execution.
Vulnerability Detail
The vulnerability in phpMyAdmin arises from a flaw in the code that handles page redirection and loading. Due to an improper test for whitelisted pages, an attacker who is authenticated can include and potentially execute files on the server. This can lead to various consequences, including unauthorized access to sensitive information, remote code execution, and potential compromise of the entire server. The vulnerability can be exploited by an attacker who has control over a specific host or by bypassing the login requirement in certain configurations.
How To Fix
Minimum fixed version
4.8.2
This is the first release that contains the fix.
composer require phpmyadmin/phpmyadmin:4.8.2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately possible, a workaround is to disable the "$cfg['AllowArbitraryServer']" and "$cfg['ServerDefault']" configurations in the phpMyAdmin configuration file. By setting these configurations to false or removing them, the vulnerability can be mitigated. However, it is still strongly advised to upgrade to the latest version as soon as possible.
Conclusion
The phpMyAdmin Improper Authentication vulnerability in phpmyadmin/phpmyadmin can allow an attacker to include and potentially execute files on the server. It is crucial to upgrade to phpMyAdmin version 4.8.2 or later to mitigate this vulnerability. Alternatively, users can apply the workaround of disabling certain configurations. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for phpmyadmin/phpmyadmin →
FAQ
phpMyAdmin is an open-source tool used for managing MySQL and MariaDB databases. It provides a web-based interface for performing various database management tasks.
The vulnerability allows an attacker to include and potentially execute files on the server. This can lead to unauthorized access to sensitive information, remote code execution, and compromise of the server.
Users of phpMyAdmin versions 4.8.x before 4.8.2 are affected by this vulnerability. Users who have enabled the "$cfg['AllowArbitraryServer']" configuration or have set "$cfg['ServerDefault']" to 0 are particularly at risk.
To fix this vulnerability, it is recommended to upgrade phpMyAdmin to version 4.8.2 or later. Alternatively, you can disable the "$cfg['AllowArbitraryServer']" and "$cfg['ServerDefault']" configurations in the phpMyAdmin configuration file.
Yes, a workaround is to disable the "$cfg['AllowArbitraryServer']" and "$cfg['ServerDefault']" configurations in the phpMyAdmin configuration file. However, it is still important to upgrade to the latest version as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin/phpmyadmin.
