Information Disclosure in Parallels Plesk Panel Control Panel
CVE-2011-4736

Currently unrated

Key Information:

Vendor

Parallels

Status
Parallels Plesk Panel
Vendor
CVE Published:
16 December 2011

What is CVE-2011-4736?

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 is susceptible to an information disclosure vulnerability, allowing remote attackers to intercept sensitive password information. This occurs when user credentials are transmitted over an unsecured HTTP connection, exposing them to potential network sniffing attacks. Vulnerable files, such as login_up.php3, facilitate this exposure, making it imperative for users to upgrade to more secure versions or implement encryption measures.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/72323
vdb-entryx_refsource_XF
http://xss.cx/examples/plesk-reports/xss-reflected-cross-...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.