CVE-2011-4749: Critical severity plesk vulnerability
The billing system for Parallels Plesk Panel 10.3.1build1013110726.09 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms on certain pages under admin/index.php/default.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4749?
CVE-2011-4749 is considered a medium severity vulnerability due to the potential for unauthorized access through credential bypass.
How do I fix CVE-2011-4749?
To fix CVE-2011-4749, disable the autocomplete feature on password fields in your billing system forms.
What vulnerabilities are addressed in CVE-2011-4749?
CVE-2011-4749 addresses the lack of autocomplete disablement for password fields in the Parallels Plesk Panel billing system.
Which versions of Parallels Plesk Panel are affected by CVE-2011-4749?
CVE-2011-4749 affects Parallels Plesk Panel version 10.3.1_build1013110726.09.
Can CVE-2011-4749 be exploited remotely?
Yes, CVE-2011-4749 can be exploited remotely by attackers leveraging unattended workstations.