CVE-2021-43008

 

Published at: - 05-04-2022 04:15

Last modified: - 13-05-2022 09:15

Total changes: - 3

Description

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability
• https://github.com/vrana/adminer/releases/tag/v4.6.3
• https://www.adminer.org/
• https://podalirius.net/en/cves/2021-43008/
• [debian-lts-announce] 20220513 [SECURITY] [DLA 3002-1] adminer security update-

 

Keywords

NVD

 

CVE-2021-43008

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures