CVE-2022-0813CWE-200

PhpMyAdmin exposure of sensitive information

Medium · published March 9, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
70.1
In the wild
Unconfirmed
What it is

PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01296 · 70.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-03-09T14:59Z
EPSS history
Timeline
  • 09 MAR 14:59Z
    PhpMyAdmin exposure of sensitive information
    cvelistv5