CVE-2016-6629
CriticalSummary
An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by ArbitraryServerRegexp.
Risk Assessment
The organization may be exposed to attacks that allow unauthorized access to servers, potentially leading to data breaches or other serious security incidents.
Recommendation
It is recommended to update phpMyAdmin to version 4.6.4 or later, 4.4.15.8 or later, and 4.0.10.17 or later to mitigate this vulnerability.
Original NVD description (English source)
An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by ArbitraryServerRegexp. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.