Adminer in Industrial Products
view advisory published 2022-05-10
Successful exploitation of this vulnerability could allow reading of database credentials and loss of sensitive information.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43008US | high7.5 | Exploit | ||
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Admine… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationAdminer
Advantech R-SeeNet (Windows Installation of R-SeeNet is only affected, upgrade to Version 2.4.19 or later)
https://icr.advantech.cz/products/software/r-seenet - FixedAdminer
Adminer has fixed this vulnerability and recommends users upgrade to Version 4.6.3 or later.
https://www.adminer.org/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan