CVE-2011-4729: Medium severity plesk vulnerability
The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by loginup.php3 and certain other files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4729?
CVE-2011-4729 is considered a medium severity vulnerability due to its impact on sensitive cookie information.
How do I fix CVE-2011-4729?
To fix CVE-2011-4729, you should upgrade to a later version of Parallels Plesk Panel that includes the HTTPOnly flag in the Set-Cookie header.
What kind of attack can exploit CVE-2011-4729?
CVE-2011-4729 can be exploited by remote attackers using cross-site scripting (XSS) to access sensitive information from cookies.
Which versions of Parallels Plesk Panel are affected by CVE-2011-4729?
CVE-2011-4729 specifically affects Parallels Plesk Panel version 10.2.0_build1011110331.18.
Is CVE-2011-4729 found in any other software besides Parallels Plesk Panel?
No, CVE-2011-4729 is identified as a specific vulnerability only in Parallels Plesk Panel version 10.2.0_build1011110331.18.