[Git][security-tracker-team/security-tracker][master] CVE-2019-12922/phpmyadmin: reference patch, mark unfixed, jessie triage

Sylvain Beucler beuc at debian.org
Thu Oct 3 14:04:04 BST 2019



Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f422cc5d by Sylvain Beucler at 2019-10-03T13:03:32Z
CVE-2019-12922/phpmyadmin: reference patch, mark unfixed, jessie triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13015,8 +13015,10 @@ CVE-2019-12924 (MailEnable Enterprise Premium 10.23 was vulnerable to XML Extern
 CVE-2019-12923 (In MailEnable Enterprise Premium 10.23, the potential cross-site reque ...)
 	NOT-FOR-US: MailEnable Enterprise Premium
 CVE-2019-12922 (A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in th ...)
-	- phpmyadmin <undetermined>
+	- phpmyadmin <unfixed>
+	[jessie] - phpmyadmin <postponed> (Minor issue, target only accessible is setup is enabled and htpasswd.setup populated)
 	NOTE: https://seclists.org/fulldisclosure/2019/Sep/23
+	NOTE: https://github.com/phpmyadmin/phpmyadmin/commit/427fbed55d3154d96ecfc1c7784d49eaa3c04161 (4.9.1)
 CVE-2019-12921
 	RESERVED
 CVE-2019-12920 (On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f422cc5d0e1a97a019278ef50e6cab47871837f3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f422cc5d0e1a97a019278ef50e6cab47871837f3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191003/b45e6d67/attachment.html>


More information about the debian-security-tracker-commits mailing list