CVE-2011-4739: Critical severity plesk vulnerability
The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/my-profile and certain other files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4739?
CVE-2011-4739 is considered a medium severity vulnerability due to its potential for unauthorized access.
How do I fix CVE-2011-4739?
To fix CVE-2011-4739, users should disable the autocomplete feature in the password form fields of the Parallels Plesk Panel.
What software versions are affected by CVE-2011-4739?
CVE-2011-4739 affects Parallels Plesk Panel version 10.2.0 build 20110407.20.
What is the impact of CVE-2011-4739?
The impact of CVE-2011-4739 allows remote attackers to bypass authentication through the use of an unattended workstation.
Is there a workaround for CVE-2011-4739?
A workaround for CVE-2011-4739 includes educating users about the risks of leaving workstations unattended and managing autocomplete settings in web browsers.