CVE-2011-4856: Critical severity plesk vulnerability
The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/health/parameters and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4856?
CVE-2011-4856 has a moderate severity level due to the potential for remote attackers to exploit content interpretation vulnerabilities.
How do I fix CVE-2011-4856?
To fix CVE-2011-4856, update to a later version of Parallels Plesk Panel where this vulnerability is addressed.
What types of files are affected by CVE-2011-4856?
CVE-2011-4856 affects certain resources including admin/health/parameters within Parallels Plesk Panel.
Can CVE-2011-4856 be exploited remotely?
Yes, CVE-2011-4856 can be exploited remotely due to incorrect Content-Type headers that permit a potential attack.
Which version of Parallels Plesk Panel is vulnerable to CVE-2011-4856?
Parallels Plesk Panel version 10.4.4_build20111103.18 is specifically vulnerable to CVE-2011-4856.