Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
phpMyAdmin Cryptographic Issues Vulnerability - CVE-2016-9847 - Vulnerability Database
phpMyAdmin

phpMyAdmin Cryptographic Issues Vulnerability - CVE-2016-9847

Medium
Reference: CVE-2016-9847
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-9847
Title: phpMyAdmin Cryptographic Issues Vulnerability
Overview:

An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies phpMyAdmin generates one at runtime. A vulnerability was reported where the way this value is created uses a weak algorithm. This could allow an attacker to determine the user39s blowfish_secret and potentially decrypt their cookies. All 4.6.x versions (prior to 4.6.5) 4.4.x versions (prior to 4.4.15.9) and 4.0.x versions (prior to 4.0.10.18) are affected.