Test ID:	1.3.6.1.4.1.25623.1.0.813163
Category:	Web application abuses
Title:	phpMyAdmin Security Bypass Vulnerability-PMASA-2017-8
Summary:	phpMyAdmin is prone to a security bypass vulnerability.
Description:	Summary: phpMyAdmin is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists due to an error where the restrictions created for accounts with no password and 'AllowNoPassword' is set to false, are bypassed under certain PHP versions. Vulnerability Impact: Successful exploitation will allow attackers to bypass security measures and do login of users who have no password set. Affected Software/OS: phpMyAdmin version 4.0 prior to 4.0.10.20, 4.4.x, 4.6.x, 4.7.0-beta1 and 4.7.0-rc1 Solution: Upgrade to phpMyAdmin version 4.0.10.20 or 4.7.0 or newer or apply patch as provided by vendor. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-18264 BugTraq ID: 97211 http://www.securityfocus.com/bid/97211 https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.