Cookie Security Flaw in Parallels Plesk Panel
CVE-2011-4728

Currently unrated

Key Information:

Vendor: Parallels
Status: Parallels Plesk Panel
Vendor: CVE Published:; 16 December 2011

What is CVE-2011-4728?

The Server Administration Panel in Parallels Plesk Panel version 10.2.0 may expose sensitive cookies, as it fails to set the secure flag during HTTPS sessions. This oversight allows attackers to capture these cookies by monitoring unencrypted HTTP traffic. The vulnerability can affect critical authentication processes, potentially leading to unauthorized access and data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/72331

vdb-entryx_refsource_XF

http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa...

x_refsource_MISC

Timeline

Vulnerability published
Dec 16, 2011
Vulnerability Reserved
Dec 11, 2011

JSON

Parallels

What is CVE-2011-4728?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.