Issue phpMyAdmin Admin Panel Exposed To The Internet

[Christopher-James]

Server operating system version

CentOS Linux 7.9.2009 (Core)

Plesk version and microupdate number

Plesk Obsidian 18.0.52

Hi

I keep getting this issue detected on one of my Wordpress installs on my PLESK server

phpMyAdmin Admin Panel Exposed To The Internet

The following instance of phpMyAdmin was detected on the remote host :

  Version : unknown
  URL     : https://mywebsite.com:8443/phpMyAdmin/

Seems like a security issue, how can i resolve this?

 

[Kaspar]

It shouldn't be a security issue as accessing the https://mywebsite.com:8443/phpMyAdmin/ URL will result in an "cannot connect" error by default. Is that any different for you?

 

[Christopher-James]

It shouldn't be a security issue as accessing the https://mywebsite.com:8443/phpMyAdmin/ URL will result in an "cannot connect" error by default. Is that any different for you?

Yes i can get to the PHPmyadim login page if i continue using the insecure connection

Im wondering why its only one domain out of 15?

 

[Kaspar]

Strange, I unable to reproduce this on my servers. For me the https://mywebsite.com:8443/phpMyAdmin/ URL redirects to the Plesk login page. Best suggestion I can give is to open a ticket with Plesk support so they can investigate the issue on your server directly.

 

[Peter Debik]

It is possible to turn phpMyAdmin access on and disabling the need to login to Plesk. Please see this KB article on it. Maybe the option is configured on your system?

https://support.plesk.com/hc/en-us/articles/12377596625303