Files or Directories Accessible to External Parties in Adminer
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43008US | high7.5 | Exploit | ||
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Admine… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/vrana/adminerPACKAGE
- https://github.com/vrana/adminer/releases/tag/v4.6.3WEB
- https://lists.debian.org/debian-lts-announce/2022/05/msg00012.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-43008ADVISORY
- https://podalirius.net/en/cves/2021-43008WEB
- https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerabilityWEB
- https://www.adminer.orgWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan