VULNERABILITY INTELLIGENCE
CVE-2008-1567
CVSS score5.5 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2008-03-31
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information.
Weakness classification
- CWE-312: Cleartext Storage of Sensitive Information
Primary references
- cve@mitre.org — Mailing List
- cve@mitre.org — Mailing List
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Issue Tracking, Third Party Advisory
- cve@mitre.org — Mailing List, Patch
- cve@mitre.org — Broken Link
- cve@mitre.org — Patch, Vendor Advisory