CSRF Token Exposure in phpMyAdmin 4.0.x - 4.3.x: CVE-2015-2206
Summary
UBUNTU-CVE-2015-2206: libraries/select_lang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1 includes invalid language values in unknown-language error responses that contain a CSRF token and may b... Affects phpmyadmin versions 4:4.0.10-1 – 4:4.0.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a widely used open-source tool for managing MySQL databases through a web interface. It allows users to perform various database operations, such as creating, modifying, and deleting databases and tables. The tool is popular among developers and database administrators for its ease of use and rich feature set. However, certain versions of phpMyAdmin are vulnerable to a security issue that can expose CSRF tokens, potentially allowing attackers to exploit this weakness.
Vulnerability Detail
The vulnerability identified as CVE-2015-2206 affects phpMyAdmin versions 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1. It arises from the inclusion of invalid language values in error responses that contain a CSRF token. This flaw can be exploited by remote attackers to conduct a BREACH attack, which may allow them to determine the CSRF token through a series of crafted requests. The implications of this vulnerability are significant, as it can lead to unauthorized actions being performed on behalf of the user.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable HTTP compression on their web server to mitigate the risk of a BREACH attack until the package is updated. This can usually be done by modifying the server configuration files, such as disabling gzip compression in Apache or Nginx.
Conclusion
CVE-2015-2206 is a critical vulnerability in phpMyAdmin that can expose CSRF tokens, allowing attackers to exploit this weakness. It is essential for users to update to the latest patched versions to mitigate this risk. Additionally, temporary workarounds can be employed until the update is applied.
See every vulnerability recorded for phpmyadmin →
FAQ
CVE-2015-2206 is a security vulnerability in phpMyAdmin that allows attackers to exploit CSRF tokens through crafted requests.
The vulnerability affects phpMyAdmin versions 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The risks include unauthorized actions being performed on behalf of the user, potentially leading to data breaches or loss of control over the database.
If immediate updates are not possible, consider disabling HTTP compression on your web server as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin.
