CVE-2016-6606

Published Dec 11, 2016
Last updated 7 years ago
CVSS high 8.1
Overview

Description: An issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username/password is vulnerable to a padding oracle attack. This can allow an attacker who has access to a user's browser cookie file to decrypt the username and password. Furthermore, the same initialization vector (IV) is used to hash the username and password stored in the phpMyAdmin cookie. If a user has the same password as their username, an attacker who examines the browser cookie can see that they are the same - but the attacker can not directly decode these values from the cookie as it is still hashed. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Source: cve@mitre.org
NVD status: Modified
Risk scores

CVSS 3.0

Type: Primary
Base score: 8.1
Impact score: 5.9
Exploitability score: 2.2
Vector string: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH
CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses

nvd@nist.gov: CWE-200
Hype score: Not currently trending
Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "13CD0228-728B-437A-84C1-BD7AFA52FFB5"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DFF55485-9892-4E7B-AEE0-017E61EAA7C0"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6100FE3E-0A31-4B55-90F2-90AF765A8EB7"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FBAAC8D9-AAA5-487C-B4AA-84BAE5DB109E"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5E06B1D3-29B4-45B7-B81F-C864AF579011"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6B2E3923-0E2B-411A-B091-088E6FF050D0"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1848C748-804D-4FE4-AB9C-B1BF9E58A19C"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "12296322-DFAD-4B36-83EC-D01BF5DF7F2A"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EA321C14-C8F4-41FC-B601-2F646064ABBF"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "54DBCF86-0CE8-46C4-B2E7-E3224765CCFE"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1BF3DBC5-7020-48D0-ADEA-E71776DB2285"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "317F952E-5F12-4ED3-8FA3-FC1106B50F85"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "87B97F98-C0A7-4D9E-8333-7EE9EC456A12"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7A1E753D-5653-4D7A-8E41-6C02511EBFCE"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "417230C7-0EC2-49F4-B810-A8AE84A302AD"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "103FEAB1-194E-4CEF-935A-4DBCCA298205"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C5814003-9FF8-4F8E-9D90-A2BBB80B8451"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C6D742A8-B9D0-4BC0-8E3E-E0FDCC1083FE"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "16D28B77-9353-4259-9299-30638A78CCD4"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C022292B-6E06-4328-842F-135A872D22AF"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F15F00FB-BB9B-4D54-B198-0A74D418B8DE"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DC10AF20-7B65-4FAE-A2AD-783867D60A8D"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4EB7190C-0401-4E2E-B15F-4CFC79D5A4E7"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4BED20D9-C571-4BC5-9A54-450A364C6E43"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2A2B646D-DDFC-4CB2-B7F4-0C33AF18D14F"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9CBF68B2-2BCF-4EEB-8A7C-D83DCAF1AFB4"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "36B92C51-B51B-4538-8A2A-102881F8024C"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2F06DC95-76B1-4E24-A55F-1358A25ED0E5"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2CA76CB4-6167-446A-8D4F-6D5B38046334"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B8D28655-7F37-474D-A4E2-772AF24B94E7"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1FA1951E-BD85-42BF-BF7F-79A14D165914"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D08BEE8-5ACF-438D-9F06-86C6227C9A5F"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "58DD0910-DBBA-4858-B9B1-FA93D08323D0"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "50DA8EBE-52AA-45A5-A5FB-75AF84E415E4"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DC8D93A3-8997-4EB9-A411-74B296D1341F"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6E5A81B2-E16F-4AE2-9691-92D3E8A25CCB"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0245AF2D-F856-4CAA-A830-36D43026D1E4"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "00BD9E52-A6BB-48BB-9FEE-D0272AD9B6DA"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C69E253E-157D-45BA-A977-079A49F74A72"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6325E2AE-BB86-4953-AA9E-0433C00B096E"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3C54B828-8B23-4C62-907E-8EE7E757B721"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "02DD18C8-172B-41CD-87DD-58BDEC0D9418"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "10666E30-D98A-47A9-881A-B281066F0EC8"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3993826B-CA66-4BC2-8E1B-06CF9230B214"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "14928F51-761E-4FCA-B13C-A11530C7FC46"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB761644-20F5-4E0D-B301-7809EAECA813"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "896439D0-6C98-44A6-8C9D-0D57D57782D5"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "978B828C-1FCB-4386-B685-5BEE5A8A500C"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "51A3261B-23BE-42D7-8A52-AE2E8C274A3D"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F0B7EA51-27EC-4884-8D60-FB9477D2B91A"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D6C9F2CC-778B-4604-B463-7A1D3FB8B9C3"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4B20C44D-0EF1-48F2-B0AA-C8FF0BD9E252"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "40F85FEC-427E-487D-997E-7EE359475876"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2C825978-7E00-4C20-A806-0B968AA589AD"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "34986C36-1C93-4DA8-A4C2-0CB8B24BAD3E"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.16:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B744FB8F-C58C-446C-B4B9-53548EBE12D3"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C641F362-D37D-47CB-BE6C-36E5F116F844"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "85631B69-7060-42D1-AE24-466BA10EB390"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E62EDC79-47AA-4CED-AB7F-1E4D158EB653"
          },
          {
            "criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C0B800AA-6290-4032-AA17-21025A19C392"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]
Overview

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References
