Skip to content
OpenAdvisories
High ICSA-22-130-01 1 CVE

Adminer in Industrial Products

Published May 10, 2022 · Updated May 10, 2022

Vendor: Adminer Product: Adminer

Summary

Successful exploitation of this vulnerability could allow reading of database credentials and loss of sensitive information.

Vulnerabilities 1

  • High 7.5
    CVE-2021-43008 Public exploit EPSS 14%

    Files or Directories Accessible to External Parties in Adminer

    Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

    adminer adminer vrana/adminer Debian Ubuntu Packagist

Revision history

  1. #1

    ICSA-22-130-01 Adminer in Industrial Products

References