CVE-2014-4987

Published: Jul 20, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

server_user_groups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request.

Affected (24)

Products: Opensuse: Opensuse · Phpmyadmin: Phpmyadmin

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1

Configuration B

22 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.1.0
Phpmyadmin Phpmyadmin	Version 4.1.10
Phpmyadmin Phpmyadmin	Version 4.1.11
Phpmyadmin Phpmyadmin	Version 4.1.12
Phpmyadmin Phpmyadmin	Version 4.1.13
Phpmyadmin Phpmyadmin	Version 4.1.14.1
Phpmyadmin Phpmyadmin	Version 4.1.14
Phpmyadmin Phpmyadmin	Version 4.1.1
Phpmyadmin Phpmyadmin	Version 4.1.2
Phpmyadmin Phpmyadmin	Version 4.1.3
Phpmyadmin Phpmyadmin	Version 4.1.4
Phpmyadmin Phpmyadmin	Version 4.1.5
Phpmyadmin Phpmyadmin	Version 4.1.6
Phpmyadmin Phpmyadmin	Version 4.1.7
Phpmyadmin Phpmyadmin	Version 4.1.8
Phpmyadmin Phpmyadmin	Version 4.1.9
Phpmyadmin Phpmyadmin	Version 4.2.0
Phpmyadmin Phpmyadmin	Version 4.2.1
Phpmyadmin Phpmyadmin	Version 4.2.2
Phpmyadmin Phpmyadmin	Version 4.2.3
Phpmyadmin Phpmyadmin	Version 4.2.4
Phpmyadmin Phpmyadmin	Version 4.2.5