CVE-2008-1567: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information.

Affected products

• Debian Debian Linux: version 4.0 only
• Fedoraproject Fedora: version 7 only; version 8 only
• Opensuse Opensuse: version 10.2 only; version 10.3 only; version 11.0 only
• phpMyAdmin phpMyAdmin: before 2.11.5.1 (fixed in 2.11.5.1)

Published 2008-03-31. Last modified 2026-06-16.