Session Timeout Bypass Vulnerability in phpMyAdmin
Summary
ALPINE-CVE-2016-9851: An issue was discovered in phpMyAdmin. Affects phpmyadmin versions < 4.4.15.9-r0. Fixed in 4.4.15.9-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a widely-used open-source tool for managing MySQL databases through a web interface. It allows users to perform various database operations, such as creating, modifying, and deleting databases and tables. The tool is popular among developers and database administrators for its ease of use and extensive features. However, it has been found to have a vulnerability that allows session timeout bypass, potentially exposing sensitive data to unauthorized access.
Vulnerability Detail
An issue was discovered in phpMyAdmin where a crafted request parameter value could bypass the logout timeout. This vulnerability affects all versions of phpMyAdmin 4.6.x prior to 4.6.5 and 4.4.x prior to 4.4.15.9. If exploited, this could allow an attacker to maintain an active session beyond the intended timeout, leading to unauthorized access to sensitive database information.
How To Fix
Minimum fixed version
4.4.15.9-r0
This is the first release that contains the fix.
sudo apk add --upgrade phpmyadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually log out of phpMyAdmin after their session or implement additional session management controls on the server-side to limit session duration.
Conclusion
The session timeout bypass vulnerability in phpMyAdmin poses a significant risk to users by allowing unauthorized access to active sessions. It is crucial for users to update to the latest patched versions to safeguard their databases and sensitive information.
See every vulnerability recorded for phpmyadmin →
FAQ
The CVSS score of this vulnerability is 5.3, indicating a medium severity level.
All versions of phpMyAdmin 4.6.x prior to 4.6.5 and 4.4.x prior to 4.4.15.9 are affected by this vulnerability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. You can check your application using the Vulert playground without any signup.
The potential risks include unauthorized access to sensitive data and the ability for attackers to maintain an active session, which could lead to data breaches.
While the best solution is to update to a patched version, you can implement additional session management controls as a temporary measure.
References
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin.
