CVE-2011-4758: Medium severity plesk vulnerability
Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4758?
CVE-2011-4758 is considered a high-severity vulnerability due to the potential for exposure of sensitive data.
How do I fix CVE-2011-4758?
To fix CVE-2011-4758, upgrade Parallels Plesk Small Business Panel to a version that supports HTTPS to protect password transmissions.
What types of information can be compromised by CVE-2011-4758?
CVE-2011-4758 allows attackers to intercept and obtain cleartext passwords and other sensitive information transmitted over HTTP.
Who is affected by CVE-2011-4758?
CVE-2011-4758 affects users of Parallels Plesk Small Business Panel version 10.2.0.
How does CVE-2011-4758 work?
CVE-2011-4758 exploits the transmission of cleartext password inputs over HTTP, making them vulnerable to network sniffing.