CVE-2011-4848: Infoleak
The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 includes a submitted password within an HTTP response body, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by password handling in certain files under client@1/domain@1/backup/local-repository/.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4848?
CVE-2011-4848 is considered a medium severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2011-4848?
To fix CVE-2011-4848, update to the latest version of Parallels Plesk Panel that ensures secure password handling.
What kind of information can be exposed by CVE-2011-4848?
CVE-2011-4848 can expose user passwords within HTTP response bodies, making them accessible to attackers on the network.
Is CVE-2011-4848 specific to certain versions of Parallels Plesk Panel?
Yes, CVE-2011-4848 specifically affects Parallels Plesk Panel version 10.4.4_build20111103.18.
What are the potential impacts of CVE-2011-4848?
The potential impacts of CVE-2011-4848 include unauthorized access to user accounts and compromise of sensitive data.