CVE-2016-6622: Improper Input Validation

December 11, 2016 (updated July 8, 2018)

An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by forcing persistent connections when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true.

References

nvd.nist.gov/vuln/detail/CVE-2016-6622
www.phpmyadmin.net/security/PMASA-2016-45

Detect and mitigate CVE-2016-6622 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →