Oval Definition:oval:org.opensuse.security:def:20162041
Revision Date:2022-06-30Version:1
Title:CVE-2016-2041
Description:

libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens, which makes it easier for remote attackers to bypass intended access restrictions by measuring time differences.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-2041
Mitre CVE-2016-2041
SUSE CVE-2016-2041
openSUSE-SU-2016:0357-1
openSUSE-SU-2016:0378-1
Platform(s):openSUSE 13.1
openSUSE 13.2
openSUSE Leap 42.1
openSUSE Tumbleweed
Product(s):
Definition Synopsis
  • openSUSE 13.1 is installed
  • AND phpMyAdmin-4.4.15.4-46.1 is installed
    • Definition Synopsis
  • openSUSE 13.2 is installed
  • AND phpMyAdmin-4.4.15.4-27.1 is installed
    • Definition Synopsis
  • openSUSE Leap 42.1 is installed
  • AND Package Information
  • phpMyAdmin-4.4.15.4-13.1 is installed
  • AND phpMyAdmin is signed with openSUSE key
    • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND phpMyAdmin-4.6.5.2-1.1 is installed
    • BACK