CVE-2011-4852: Infoleak
The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 generates web pages containing external links in response to GET requests with query strings for enterprise/mobile-monitor/ and certain other files, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4852?
CVE-2011-4852 is classified as a moderate severity vulnerability.
How does CVE-2011-4852 affect Parallels Plesk Panel?
CVE-2011-4852 allows remote attackers to obtain sensitive information through specially crafted GET requests.
What versions of Parallels Plesk Panel are affected by CVE-2011-4852?
CVE-2011-4852 specifically affects Parallels Plesk Panel version 10.4.4_build20111103.18.
How can I mitigate CVE-2011-4852?
To mitigate CVE-2011-4852, ensure that you upgrade to a more secure version of Parallels Plesk Panel not affected by this vulnerability.
Is there a known exploit for CVE-2011-4852?
Yes, there are reports indicating that CVE-2011-4852 can be exploited for cross-site scripting attacks.