Lucene search
HistoryDec 16, 2011 - 11:55 a.m.
CVE-2011-4758
cve-2011-4758
parallels plesk
small business panel
cleartext password
vulnerability
remote attackers
sensitive information
http
sniffing
network
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
61.1%
Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files.
Affected configurations
Node
parallelsparallels_plesk_small_business_panelMatch10.2.0
Related
cvelist
cvelist
CVE-2011-4758
2011-12-16 11:00:00
prion
prion
Default credentials
2011-12-16 11:55:00
nvd
nvd
CVE-2011-4758
2011-12-16 11:55:11
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
61.1%
Related for CVE-2011-4758