Local File Disclosure Vulnerability in phpMyAdmin: CVE-2018-19968
Summary
CVE-2018-19968: An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. Affects phpmyadmin across 2 version ranges.
< 4:4.9.1+dfsg1-2
>= 6da64cc3b2ba4439574f914f51e161645375be96, < 56ba19808f020fa8ac63366d450c3928564a91b8
Fixed in 4:4.9.1+dfsg1-2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a widely-used open-source tool for managing MySQL databases through a web interface. It provides a user-friendly way to interact with databases, allowing users to execute SQL queries, manage database structures, and handle data. However, certain versions of phpMyAdmin prior to 4.8.4 are vulnerable to a local file disclosure issue due to an error in the transformation feature, which can be exploited if an attacker has access to the phpMyAdmin Configuration Storage tables.
Vulnerability Detail
CVE-2018-19968 allows an attacker with valid credentials to exploit phpMyAdmin versions before 4.8.4 to leak the contents of local files. The vulnerability arises from improper handling of the transformation feature, enabling attackers to access sensitive information stored in local files. This issue requires the attacker to have access to the phpMyAdmin Configuration Storage tables, which can be easily created in any accessible database. The vulnerability does not allow bypassing the login system, but it poses a significant risk to data confidentiality.
How To Fix
Minimum fixed version
4:4.9.1+dfsg1-2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade phpmyadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading is not immediately possible, consider restricting access to phpMyAdmin to trusted IP addresses only and ensure that sensitive files are not accessible through the web server.
Conclusion
CVE-2018-19968 is a significant vulnerability in phpMyAdmin that can lead to local file disclosure if not addressed. Users are urged to upgrade to the latest version to mitigate risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for phpmyadmin →
FAQ
CVE-2018-19968 is a vulnerability in phpMyAdmin that allows an attacker to leak the contents of local files due to an error in the transformation feature.
Any user of phpMyAdmin versions prior to 4.8.4 who has valid login credentials and access to the Configuration Storage tables is at risk.
An attacker could gain access to sensitive information stored in local files, leading to data breaches and potential exploitation of other vulnerabilities.
You can use Vulert, which monitors open-source vulnerabilities in your software. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
The CVSS score for CVE-2018-19968 is 6.5, indicating a medium severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin.
