Oval Definition:oval:org.opensuse.security:def:202010804
Revision Date:2022-06-30Version:1
Title:CVE-2020-10804
Description:

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php). A malicious user with access to the server could create a crafted username, and then trick the victim into performing specific actions with that user account (such as editing its privileges).
Family:unixClass:vulnerability
Status:Reference(s):CVE-2020-10804
openSUSE-SU-2020:0405-1
openSUSE-SU-2020:0427-1
openSUSE-SU-2020:1806-1
Mitre CVE-2020-10804
SUSE CVE-2020-10804
openSUSE-SU-2020:0405-1
openSUSE-SU-2020:0427-1
openSUSE-SU-2020:1806-1
Platform(s):openSUSE Leap 15.1
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
SUSE Package Hub for SUSE Linux Enterprise 12
SUSE Package Hub for SUSE Linux Enterprise 15
SUSE Package Hub for SUSE Linux Enterprise 15 SP1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • phpMyAdmin-4.9.7-lp151.2.24 is installed
  • AND phpMyAdmin is signed with openSUSE key
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 is installed
  • AND phpMyAdmin-4.9.7-52 is installed
  • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • phpMyAdmin-5.1.1-1.2 is installed
  • OR phpMyAdmin-apache-5.1.1-1.2 is installed
  • OR phpMyAdmin-lang-5.1.1-1.2 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
  • AND phpMyAdmin-4.9.7-bp151.3.24.1 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 is installed
  • AND phpMyAdmin-4.9.7-52.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
  • AND phpMyAdmin-4.9.7-bp151.3.24.1 is installed
  • OR Package Information
  • SUSE Package Hub for SUSE Linux Enterprise 15 is installed
  • AND phpMyAdmin-4.9.7-bp150.43.1 is installed
  • BACK