CVE-2016-1927

CVE-2016-1927 describes a weakness in the suggestPassword function within phpMyAdmin versions 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4. This vulnerability stems from its reliance on the predictable Math.random JavaScript function for password generation, making generated passwords susceptible to brute-force attacks. Rated with a CVSS score of 7.5 (HIGH), this vulnerability has a network attack vector and low attack complexity, potentially leading to high confidentiality impact by allowing remote attackers to guess passwords. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.