{"id":"GHSA-r2vw-p77f-vc27","aliases":["CVE-2016-9851"],"title":"phpMyAdmin Bypass logout timeout","description":"An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeout. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected.","severity":"medium","score":5.3,"published":"2022-05-17T02:36:38.000Z","modified":"2024-04-24T18:28:58.105Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","ranges":[{"events":[{"introduced":"4.6"},{"fixed":"4.6.5"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["4.6.5"]},{"ecosystem":"Packagist","name":"phpmyadmin/phpmyadmin","ranges":[{"events":[{"introduced":"4.4"},{"fixed":"4.4.15.9"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["4.4.15.9"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2016-9851","https://github.com/phpmyadmin/composer","https://security.gentoo.org/glsa/201701-32","https://www.phpmyadmin.net/security/PMASA-2016-62","http://www.securityfocus.com/bid/94534"],"sources":[{"name":"OSV","id":"GHSA-r2vw-p77f-vc27","modified":"2024-04-24T18:28:58.105224Z","url":"https://osv.dev/vulnerability/GHSA-r2vw-p77f-vc27"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","score":5.3}]}