Lucene search
MitreCVE-2011-4728HistoryDec 16, 2011 - 11:55 a.m.
CVE-2011-4728
2011-12-1611:55:07
CWE-200
mitre
web.nvd.nist.gov
22
parallels
plesk panel
cookie security
session hijacking
remote attackers
vulnerability
cve-2011-4728
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
69.7%
The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by login_up.php3 and certain other files.
Affected configurations
Node
parallelsparallels_plesk_panelMatch10.2.0_build1011110331.18
microsoftwindows
ORredhatenterprise_linuxMatch6.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| parallels | parallels_plesk_panel | 10.2.0_build1011110331.18 | cpe:2.3:a:parallels:parallels_plesk_panel:10.2.0_build1011110331.18:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 6.0 | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2011-4728
2011-12-16 11:55:07
cvelist
cvelist
CVE-2011-4728
2011-12-16 11:00:00
prion
prion
Design/Logic Flaw
2011-12-16 11:55:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
69.7%
Related for CVE-2011-4728