ID de Prueba:	1.3.6.1.4.1.25623.1.0.806735
Categoría:	Web application abuses
Título:	phpMyAdmin Security Bypass Vulnerability (Nov 2015) - Linux
Resumen:	phpMyAdmin is prone to reCaptcha bypass vulnerability.
Descripción:	Summary: phpMyAdmin is prone to reCaptcha bypass vulnerability. Vulnerability Insight: The flaw is due to an error in 'libraries/plugins/auth/AuthenticationCookie.class.php' script while implementing multiple-reCaptcha protection mechanism so that it provide a correct response to a single reCaptcha. Vulnerability Impact: Successfully exploiting this issue may allow remote attackers to bypass multiple-reCaptcha protection mechanism. Affected Software/OS: phpMyAdmin versions 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 on Linux Solution: Upgrade to phpMyAdmin 4.3.13.2 or 4.4.14.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6830 BugTraq ID: 76674 http://www.securityfocus.com/bid/76674 Debian Security Information: DSA-3382 (Google Search) http://www.debian.org/security/2015/dsa-3382 http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166531.html http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166294.html http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166307.html http://www.securitytracker.com/id/1033546
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.