CVE-2011-4759: Infoleak
Parallels Plesk Small Business Panel 10.2.0 generates web pages containing external links in response to GET requests with query strings for client@1/domain@1/hosting/file-manager/ and certain other files, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4759?
CVE-2011-4759 is rated as a medium severity vulnerability due to its potential exposure of sensitive information.
How do I fix CVE-2011-4759?
To address CVE-2011-4759, upgrade to a non-vulnerable version of Parallels Plesk Small Business Panel that mitigates this issue.
What types of systems are affected by CVE-2011-4759?
CVE-2011-4759 specifically affects Parallels Plesk Small Business Panel version 10.2.0.
What does CVE-2011-4759 exploit?
CVE-2011-4759 exploits the generation of web pages with external links in response to specific GET requests, potentially leading to information leakage.
Are there any known workarounds for CVE-2011-4759?
There are no specific workarounds for CVE-2011-4759, but restricting access to the affected application can reduce exposure.