CVE-2016-2562

Published: Mar 1, 2016Modified: May 6, 2026

6.8

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

Exploitability: 2.2 / Impact: 4.0

Source: NVD

Description

The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate.

Affected (13)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.5.0.1
Phpmyadmin Phpmyadmin	Version 4.5.0.2
Phpmyadmin Phpmyadmin	Version 4.5.0
Phpmyadmin Phpmyadmin	Version 4.5.0 beta1
Phpmyadmin Phpmyadmin	Version 4.5.0 beta2
Phpmyadmin Phpmyadmin	Version 4.5.0 rc1
Phpmyadmin Phpmyadmin	Version 4.5.1
Phpmyadmin Phpmyadmin	Version 4.5.2
Phpmyadmin Phpmyadmin	Version 4.5.3.1
Phpmyadmin Phpmyadmin	Version 4.5.3
Phpmyadmin Phpmyadmin	Version 4.5.4.1
Phpmyadmin Phpmyadmin	Version 4.5.4
Phpmyadmin Phpmyadmin	Version 4.5.5