The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.0"
},
{
"last_affected": "4.0.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.0-rc2"
},
{
"last_affected": "4.0.0-rc2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc3:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.0-rc3"
},
{
"last_affected": "4.0.0-rc3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.1"
},
{
"last_affected": "4.0.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10"
},
{
"last_affected": "4.0.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.1"
},
{
"last_affected": "4.0.10.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.2"
},
{
"last_affected": "4.0.10.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.3"
},
{
"last_affected": "4.0.10.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.4"
},
{
"last_affected": "4.0.10.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.5"
},
{
"last_affected": "4.0.10.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.6"
},
{
"last_affected": "4.0.10.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.7"
},
{
"last_affected": "4.0.10.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.8"
},
{
"last_affected": "4.0.10.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.9"
},
{
"last_affected": "4.0.10.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.10"
},
{
"last_affected": "4.0.10.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.11"
},
{
"last_affected": "4.0.10.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.10.12"
},
{
"last_affected": "4.0.10.12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.0"
},
{
"last_affected": "4.4.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.1"
},
{
"last_affected": "4.4.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.1.1"
},
{
"last_affected": "4.4.1.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.2"
},
{
"last_affected": "4.4.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.3"
},
{
"last_affected": "4.4.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.4"
},
{
"last_affected": "4.4.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.5"
},
{
"last_affected": "4.4.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.6"
},
{
"last_affected": "4.4.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.6.1"
},
{
"last_affected": "4.4.6.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.7"
},
{
"last_affected": "4.4.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.8"
},
{
"last_affected": "4.4.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.9"
},
{
"last_affected": "4.4.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.10"
},
{
"last_affected": "4.4.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.11"
},
{
"last_affected": "4.4.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.12"
},
{
"last_affected": "4.4.12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.13"
},
{
"last_affected": "4.4.13"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.13.1"
},
{
"last_affected": "4.4.13.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.14.1"
},
{
"last_affected": "4.4.14.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15"
},
{
"last_affected": "4.4.15"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15.1"
},
{
"last_affected": "4.4.15.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15.2"
},
{
"last_affected": "4.4.15.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15.3"
},
{
"last_affected": "4.4.15.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.5.0"
},
{
"last_affected": "4.5.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.5.0.1"
},
{
"last_affected": "4.5.0.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.5.0.2"
},
{
"last_affected": "4.5.0.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.5.1"
},
{
"last_affected": "4.5.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.5.2"
},
{
"last_affected": "4.5.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.5.3"
},
{
"last_affected": "4.5.3"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "8dedcc1a175eb07debd4fe116407c43694c60b22"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "912856b432d794201884c36e5f390d446339b6e4"
}
],
"source": "REFERENCES_COMMIT"
}
]
}