CVE-2021-4259

A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of the file includes/login.inc.php. The manipulation of the argument response leads to use of wrong operator in string comparison. Upgrading to version 1.16.2 is able to address this issue. The name of the patch is 31aa7661e6db6f4dffbf9a635817832a0a11c7d9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216267.

• CWE-597

• https://github.com/erikdubbelboer/phpRedisAdmin/commit/31aa7661e6db6f4dffbf9a635817832a0a11c7d9Patch, Third Party Advisory
• https://github.com/erikdubbelboer/phpRedisAdmin/releases/tag/v1.16.2Release Notes, Third Party Advisory
• https://vuldb.com/?id.216267Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/erikdubbelboer/phpRedisAdmin/commit/31aa7661e6db6f4dffbf9a635817832a0a11c7d9Patch, Third Party Advisory
• https://github.com/erikdubbelboer/phpRedisAdmin/releases/tag/v1.16.2Release Notes, Third Party Advisory
• https://vuldb.com/?id.216267Permissions Required, Third Party Advisory, VDB Entry

Published

Dec 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42580Sourcecodester Online Learning System 2.0 is vunlerable to s…9.8
• CVE-2021-42581Prototype poisoning in function mapObjIndexed in Ramda 0.27.…9.1
• CVE-2021-42583A Broken or Risky Cryptographic Algorithm exists in Max Mazu…7.5
• CVE-2021-42584A Stored Cross Site Scripting (XSS) issue exists in Convos-C…5.4
• CVE-2021-42585A heap buffer overflow was discovered in copy_compressed_byt…8.8
• CVE-2021-42586A heap buffer overflow was discovered in copy_bytes in decod…8.8
• CVE-2021-42597A Cross Site Scripting (XSS) vulnerability exists in Sourcec…5.4
• CVE-2021-4260A vulnerability was found in oils-js. It has been declared a…6.1
• CVE-2021-4261A vulnerability classified as critical has been found in pac…9.8
• CVE-2021-42612A use after free in cleanup_index in index.c in Halibut 1.2 …7.8
• CVE-2021-42613A double free in cleanup_index in index.c in Halibut 1.2 all…7.8
• CVE-2021-42614A use after free in info_width_internal in bk_info.c in Hali…7.8