CVE-2011-2719 Other in n/a
Remote attackers can modify session and superglobal variables in phpMyAdmin when Swekey authentication is enabled, potentially bypassing security controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-2719?
CVE-2011-2719 is a medium-severity vulnerability in Phpmyadmin Phpmyadmin, published on 1 Aug 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.
Weakness: CWE-20
Which versions are affected by CVE-2011-2719?
It affects 1 product.
Products include Phpmyadmin Phpmyadmin.
How do I fix CVE-2011-2719?
Upgrade to a fixed version.
Is CVE-2011-2719 being exploited?
There is no known exploitation of CVE-2011-2719 in the wild and no public exploit code.
Other vulnerabilities in Phpmyadmin Phpmyadmin
Sources
Also known as DEBIAN-CVE-2011-2719, GHSA-fmmw-6q24-3wqx.