Detections
Analytics

Fedora 30 : phpMyAdmin (2019-8f55b515f1)

critical Nessus Plugin ID 131454

Language:

Synopsis

The remote Fedora host is missing a security update.

Description

Upstream announcement :

**phpMyAdmin 4.9.2 is released**

2019-11-22

Welcome to phpMyAdmin 4.9.2, a bugfix release that also contains a security fix.

This security fix is part of an ongoing effort to improve the security of the Designer feature and is designated **PMASA-2019-5**. There is also an improvement for how we sanitize Git version information shown on the home page, thanks to Ali Hubail.

This release includes fixes for many bugs, including :

 - Fixes for the 'Failed to set session cookie' error which relates to the cookie name. In some cases, data stored in the cookie (such as the previously-used user account) may not be loaded from a previous phpMyAdmin cookie the first time you run version 4.9.2

 - Fix for Advisor with MySQL 8.0.3 and newer

 - Fix PHP deprecation errors

 - Fix a situation where exporting users after a delete query could remove users

 - Fix incorrect 'You do not have privileges to manipulate with the users!' warning

 - Fix copying a database's privileges and several other problems moving columns with MariaDB

 - Fix for phpMyAdmin not selecting all the values when using shift-click to select during Export

There are many, many more bug fixes thanks to the efforts of our developers and other contributors.

The phpMyAdmin team

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected phpMyAdmin package.

See Also

https://bodhi.fedoraproject.org/updates/FEDORA-2019-8f55b515f1

Plugin Details

Severity: Critical

ID: 131454

File Name: fedora_2019-8f55b515f1.nasl

Version: 1.4

Type: local

Agent: unix

Published: 12/3/2019

Updated: 4/9/2024

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2019-18622

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:phpmyadmin, cpe:/o:fedoraproject:fedora:30

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 12/1/2019

Vulnerability Publication Date: 11/22/2019

Reference Information

CVE: CVE-2019-18622