phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs.

The remote host is affected by the vulnerability described in GLSA-201701-32 (phpMyAdmin: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in phpMyAdmin. Please       review the CVE identifiers referenced below for details.
  Impact :

    A authenticated remote attacker could exploit these vulnerabilities to       execute arbitrary PHP Code, inject SQL code, or to conduct Cross-Site       Scripting attacks.
    In certain configurations, an unauthenticated remote attacker could       cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

phpMyAdmin 4.6.2 (2016-05-25) =============================

  - [security] User SQL queries can be revealed through URL     GET parameters, see PMASA-2016-14

  - [security] Self XSS vulneratbility, see PMASA-2016-16

  - Use https for documentation links

  - Fix schema export with too many tables

  - Avoid parsing non JSON responses as JSON

  - Avoid using too log URLs when getting javascripts

  - Fixed setting mixed case languages

  - Avoid storing objects in session when debugging SQL

  - Fix cookie path on IIS

  - Fix occassional 200 errors on Windows

  - Fix locking issues when importing SQL

  - Avoid confusing warning when mysql extension is missing

  - Improve handling of logout

  - Safer handling of sessions during authentication

  - Fix server selection on main page

  - Avoid storing full error data in session

  - Fixed export of ARCHIVE tables with keys

  - Add session reload for config authentication

  - Do not fail on errors stored in session

  - Fix loading of APC based upload progress bar

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Versions of phpMyAdmin prior to 4.6.2 are unpatched for an information disclosure vulnerability which may leak sensitive SQL details. Such versions contain a flaw that is triggered as user's SQL queries are part of the URL, which may disclose them when accessing external links from within the web application. This may allow a context-dependent attacker to potentially gain knowledge of sensitive information.

This phpMyAdmin update to version 4.4.15.6 fixes the following issues :

Security issues fixed :

  - PMASA-2016-16 (CVE-2016-5099, CWE-661): Self XSS, see     https://www.phpmyadmin.net/security/PMASA-2016-16/

  - PMASA-2016-15 (CVE-2016-5098, CWE-661): File Traversal     Protection Bypass on Error Reporting, see     https://www.phpmyadmin.net/security/PMASA-2016-15/

  - PMASA-2016-14 (CVE-2016-5097, CWE-661): Sensitive Data     in URL GET Query Parameters, see     https://www.phpmyadmin.net/security/PMASA-2016-14/

The phpmyadmin development team reports : Description Because user SQL queries are part of the URL, sensitive information made as part of a user query can be exposed by clicking on external links to attackers monitoring user GET query parameters or included in the webserver logs. Severity We consider this to be non-critical. Description A specially crafted attack could allow for special HTML characters to be passed as URL encoded values and displayed back as special characters in the page. Severity We consider this to be non-critical.

ID	Name	Product	Family	Severity
96426	GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
92189	Fedora 24 : phpMyAdmin (2016-e3240782ec)	Nessus	Fedora Local Security Checks	medium
92163	Fedora 22 : phpMyAdmin (2016-cd05bd994a)	Nessus	Fedora Local Security Checks	medium
92097	Fedora 23 : phpMyAdmin (2016-55261b6815)	Nessus	Fedora Local Security Checks	medium
9358	phpMyAdmin < 4.6.2 Information Disclosure (PMASA-2016-14)	Nessus Network Monitor	CGI	low
91587	openSUSE Security Update : phpMyAdmin (openSUSE-2016-712)	Nessus	SuSE Local Security Checks	medium
91332	FreeBSD : phpmyadmin -- XSS and sensitive data leakage (00ec1be1-22bb-11e6-9ead-6805ca0b3d42)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2016-5097

medium

Tenable Plugins

critical

medium

medium

medium

low

medium

medium